Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-47253 · CVE overview and exploitation status

EUVD-2026-77807

GHSA-j9rx-rppg-6hh4

GO-2026-5459

cve-program · CVE-2026-47253

• https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4
• https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
• https://github.com/julien040/anyquery/releases/tag/0.4.5

euvd · EUVD-2026-77807

• https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4
• https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
• https://github.com/julien040/anyquery/releases/tag/0.4.5

nvd · CVE-2026-47253

• https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c
• https://github.com/julien040/anyquery/releases/tag/0.4.5
• https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4

osv · GHSA-j9rx-rppg-6hh4

• https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4
• https://github.com/julien040/anyquery
• https://github.com/julien040/anyquery/releases/tag/0.4.5

osv · GO-2026-5459

• https://github.com/julien040/anyquery/security/advisories/GHSA-j9rx-rppg-6hh4
• https://github.com/julien040/anyquery/releases/tag/0.4.5

No related changes are available here.