ankitects

6 results · Clear filters · Feed

• Medium 5.9
  CVE-2026-64677

  Anki's local HTTP server is vulnerable to directory traversal attacks

  Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined wit…

  ankitects anki anki Ubuntu
  Aug 6, 2026
• Medium 6.5
  CVE-2026-58266

  Anki: User scripts in iframes have access to the internal Anki API

  Anki is a program for creating and reviewing flashcards. Prior to 25.09.4, Anki's webview-based pages communicate with the Rust backend using an internal localhost API, and user scripts included via iframes in the editor can access this API despite protection…

  ankitects anki anki aqt Ubuntu PyPI
  Jul 7, 2026
• Medium 6.7
  CVE-2025-62185

  In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, …

  ankitects anki
  Oct 7, 2025
• Medium 6.7
  CVE-2025-62186

  Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio …

  ankitects anki
  Oct 7, 2025
• Medium 6.1
  CVE-2025-43703

  An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access…

  ankitects anki anki Ubuntu
  Apr 16, 2025
• Medium 5.3
  CVE-2024-29073 EPSS 12%

  Anki Latex Incomplete Blocklist Vulnerability

  An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcar…

  ankitects anki anki anki Debian Ubuntu PyPI
  Jul 22, 2024