Go/github.com/julien040/anyquery CVE-2026-47253: high 7.3, EPSS 0.44%

Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion

Action: Upgrade github.com/julien040/anyquery to 0.4.5 or later.

go get github.com/julien040/anyquery@v0.4.5

Affected

Fixed versions

Sources

• osv: GHSA-j9rx-rppg-6hh4
• https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4
• https://github.com/julien040/anyquery
• https://github.com/julien040/anyquery/releases/tag/0.4.5

CVE-2026-47253 · published 2026-06-10T17:11:53Z · modified 2026-06-25T23:11:43.757820671Z · JSON