Ankitects Anki vulnerabilities
11 published CVEs name Ankitects Anki among the affected products.
- 11Published CVEs11 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-64677
Anki's local HTTP server is vulnerable to directory traversal attacks
ankitects · anki
Medium5.9 - CVE-2026-58266
Anki: User scripts in iframes have access to the internal Anki API
ankitects · anki
Medium6.5 - CVE-2026-59153
Anki's local HTTP server does not sufficiently validate requests
ankitects · anki
Low2.1 - CVE-2025-62187
In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux (media file…
Ankitects · Anki
Low2.9 - CVE-2025-62186
Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL scheme mishandling.
Ankitects · Anki
Medium6.7 - CVE-2025-62185
In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link…
Ankitects · Anki
Medium6.7 - CVE-2025-43703
An issue was discovered in Ankitects Anki through 25.02. A crafted shared deck can result in attacker-controlled access to the internal API (even though the…
Ankitects · Anki
Medium6.1 - CVE-2024-29073
An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes…
Ankitects · Anki
Medium5.3 - CVE-2024-26020
An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code…
Ankitects · Anki
Critical9.6 - CVE-2024-32152
A blocklist bypass vulnerability exists in the LaTeX functionality of Ankitects Anki 24.04. A specially crafted malicious flashcard can lead to an arbitrary…
Ankitects · Anki
Low3.1