Skip to content
OpenAdvisories

Vendor

ankitects

11 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Low 2.1

    Anki's local HTTP server does not sufficiently validate requests

    Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, Anki launches a local HTTP server to serve media files and web pages for parts of its interface, but requests from other origins were not sufficiently blocked. A malicious website coul…

  • Low 2.9

    In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations …

  • Low 3.1
    CVE-2024-32152 EPSS 12%

    Ankitects Anki LaTeX Blocklist Bypass vulnerability

    A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary file creation at a fixed path. An attacker can share a malicious flashcard to trigger this vulnerabili…