Skip to content
OpenAdvisories

Package · Go

github.com/julien040/anyquery/plugins/chrome

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.0

    Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)

    Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, authenticated users with INSERT or UPDATE access to affected macOS virtual tables can execute operating-system commands because the Chrome plugin and equivalent Brave, Edge, and Safari va…