Skip to content
OpenAdvisories

Package · Debian

anki

4 known vulnerabilities.

4 results · Feed

  • Medium 5.3
    CVE-2024-29073 EPSS 12%

    Anki Latex Incomplete Blocklist Vulnerability

    An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcar…

  • Low 3.1
    CVE-2024-32152 EPSS 12%

    Ankitects Anki LaTeX Blocklist Bypass vulnerability

    A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerabili…

  • Critical 9.6
    CVE-2024-26020 EPSS 15%

    Ankitects Anki arbitrary script execution vulnerability

    An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability.

  • High 7.4
    CVE-2024-32484 EPSS 21%

    An reflected XSS vulnerability exists in the handling of invalid paths in the Flask server in Ankitects Anki 24.04. A s…