Julien040 Anyquery vulnerabilities

• julien040 anyquery Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode CVE-2026-54629 Fix available 7.5 HighJuly 14, 2026
• julien040 anyquery Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode CVE-2026-54628 Fix available 8.6 HighJuly 14, 2026
• julien040 anyquery Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode CVE-2026-50006 Fix available 9.1 CriticalJuly 14, 2026
• julien040 anyquery Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion CVE-2026-47253 Fix available 7.3 HighJune 10, 2026
• julien040 anyquery, anyquery github.com/julien040/anyquery/plugins/brave, github.com/julien040/anyquery/plugins/chrome +3 more +5 more Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari) CVE-2026-47252 Fix available 9.0 CriticalJune 8, 2026
• julien040 anyquery Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data CVE-2025-61679 7.7 HighOctober 3, 2025