Skip to content
OpenAdvisories

Package · Ubuntu

anki

8 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.1

    Anki's local HTTP server does not sufficiently validate requests

    Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files and web pages for parts of its interface, but requests from other origins were not sufficiently blocked. A malicious website coul…

  • Low 3.1
    CVE-2024-32152 EPSS 12%

    Ankitects Anki LaTeX Blocklist Bypass vulnerability

    A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerabili…