SUSE CVE-2026-28350

lxmlhtmlclean is a project for HTML cleaning functionalities copied from lxml.html.clean. Prior to version 0.4.4, the tag passes through the default Cleaner configuration. While pagestructure=True removes html, head, and title tags, there is no specific handling for , allowing an attacker to inje...

CVE-2025-61679

Summary: CVE-2025-61679 affects Anyquery (SQLite-based SQL query engine). Versions ≤ 0.4.3 allow an attacker with localhost access (low privileges) to use the HTTP server via the port unauthenticated and access private integration data (e.g., emails) without provider login warnings. Root cause: u...

PT-2025-40603

Name of the Vulnerable Software and Affected Versions Anyquery versions 0.4.3 and below Description Anyquery is an SQL query engine built on top of SQLite. Attackers who have gained access to localhost, even with low privileges, can use the http server through the port unauthenticated and access...