Jonathan Daggerhart vulnerabilities and threats

CVE-2026-73992 is a critical vulnerability in Jonathan Daggerhart's Query Wrangler product, affecting versions up to and including 1.5.57. It involves improper control of code generation (CWE-94), leading to a remote code execution (RCE) vulnerability. The flaw allows an attacker with limited privileges to execute arbitrary code remotely without user interaction. The vulnerability has a very high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No specific patch or remediation details are provided in the available data.

Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.

Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects Widget Wrangler: from n/a through <= 2.3.9.

Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler query-wrangler allows Cross Site Request Forgery.This issue affects Query Wrangler: from n/a through <= 1.5.54.