Skip to content
OpenAdvisories

Package · Ubuntu

anki

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-64677

    Anki's local HTTP server is vulnerable to directory traversal attacks

    Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined wit…

    ankitects anki anki Ubuntu
  • Medium 6.5
    CVE-2026-58266

    Anki: User scripts in iframes have access to the internal Anki API

    Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal localhost API, and user scripts included via iframes in the editor can access this API despite protection…

    ankitects anki anki aqt Ubuntu PyPI
  • Medium 6.1
    CVE-2025-43703

    An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access…

    ankitects anki anki Ubuntu
  • Medium 5.3
    CVE-2024-29073 EPSS 12%

    Anki Latex Incomplete Blocklist Vulnerability

    An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcar…

    ankitects anki anki anki Debian Ubuntu PyPI