AN
Product
anyquery
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 0Low 0
Watch
Add anyquery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50006 | 9.1 | Sep 14 | Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode Affected: < 0.4.5 |
| CVE-2026-47252 | 9.0 | Sep 17 | Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari) Affected: < 0.4.5 |
| CVE-2026-54628 | 8.6 | Sep 14 | Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode Affected: < 0.4.5 |
| CVE-2025-61679 | 7.7 | Oct 3 | Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data Affected: < 0.4.4 |
| CVE-2026-54629 | 7.5 | Sep 14 | Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode Affected: < 0.4.5 |
| CVE-2026-47253 | 7.3 | Sep 14 | Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion Affected: < 0.4.5 |
Showing 6
