EUVD-2026-77812Published
Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-54628 · Microsoft / collected KEV context
cve-program · CVE-2026-54628
- https://github.com/julien040/anyquery/security/advisories/GHSA-hwrq-8wxh-q4xv
- https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
- https://github.com/julien040/anyquery/releases/tag/0.4.5
euvd · EUVD-2026-77812
- https://github.com/julien040/anyquery/security/advisories/GHSA-hwrq-8wxh-q4xv
- https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
- https://github.com/julien040/anyquery/releases/tag/0.4.5
nvd · CVE-2026-54628
- https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
- https://github.com/julien040/anyquery/releases/tag/0.4.5
- https://github.com/julien040/anyquery/security/advisories/GHSA-hwrq-8wxh-q4xv
osv · GHSA-hwrq-8wxh-q4xv
- https://github.com/julien040/anyquery/security/advisories/GHSA-hwrq-8wxh-q4xv
- https://github.com/julien040/anyquery
- https://github.com/julien040/anyquery/releases/tag/0.4.5
osv · GO-2026-5988
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.