Affected by GO-2026-5459
and 3 other vulnerabilities
GO-2026-5459: Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion in github.com/julien040/anyquery
GO-2026-5979: Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode in github.com/julien040/anyquery
GO-2026-5988: Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery
GO-2026-5990: Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery
OpenDatabaseConnection opens a connection to the database
If the path is empty, it defaults to XDG_CONFIG_HOME/anyquery/config.db
However, if the path is not empty, it will use the provided path (must be created beforehand)
Affected by 
Documentation
¶
Source Files
Directories