Known vulnerabilities in Anki

Vendor: Ankitects
Software: Anki
Software CPE: cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Anki Anki is affected by 9 known vulnerabilities: 2 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139909 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-64677
CWE-22 Medium
No
No
25.09.3 28.07.2026 SB20260728102
#VU139908 - Improper Access Control
CVE-2026-59153
CWE-284 Low
No
No
25.09.3 28.07.2026 SB20260728102
#VU139907 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-58266
CWE-22 Medium
No
No
25.09.4 28.07.2026 SB20260728101
#VU139906 - Uncontrolled Search Path Element
CVE-2025-62185
CWE-427 Medium
No
No
25.02.5 28.07.2026 SB2026072899
#VU139905 - Relative Path Traversal
CVE-2025-62187
CWE-23 High
No
No
25.02.6 28.07.2026 SB20260728100
#VU94657 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2024-26020
CWE-74 High
No
No
24.06.3 23.07.2024 SB2024072309
#VU94656 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2024-29073
CWE-829 Medium
No
No
24.06.3 23.07.2024 SB2024072309
#VU94654 - Incomplete List of Disallowed Inputs
CVE-2024-32152
CWE-184 Low
No
No
24.06.3 23.07.2024 SB2024072309
#VU94652 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-32484
CWE-79 Low
No
No
24.06.3 23.07.2024 SB2024072309