Vulnerabilities

TI-2026-34835 CVE-2026-47252 · GHSA-hrj8-hjv8-mgwc

Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)

HIGH 74

Anyquery is an SQL query engine built on top of SQLite.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00705 Published 2026-09-17 Fixed in 0.4.5, 0.2.0 +1 CWE-94

TI-2026-39459 CVE-2026-54628 · GHSA-hwrq-8wxh-q4xv

HIGH 76

Anyquery is an SQL query engine built on top of SQLite.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00597 Published 2026-09-14 Fixed in 0.4.5 CWE-284

TI-2026-36832 CVE-2026-50006 · GHSA-xrcf-6jh3-ggvx

HIGH 80

Anyquery is an SQL query engine built on top of SQLite.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00973 Published 2026-09-14 Fixed in 0.4.5 CWE-22

TI-2026-39460 CVE-2026-54629 · GHSA-mf78-3rpf-r784

MEDIUM 41

Anyquery is an SQL query engine built on top of SQLite.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00966 Published 2026-09-14 Fixed in 0.4.5 CWE-22

TI-2026-34836 CVE-2026-47253 · GHSA-j9rx-rppg-6hh4

HIGH 65

Anyquery is an SQL query engine built on top of SQLite.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00441 Published 2026-09-14 Fixed in 0.4.5 CWE-22

TI-2025-38111 CVE-2025-61679

HIGH 67

Anyquery is an SQL query engine built on top of SQLite.

CVSS 3.1HIGH 7.7 Local No auth No interaction EPSS 0.00153 Published 2025-10-03 Fixed in 0.4.4 CWE-200