Known vulnerabilities in Anki 25.02.4

Vendor: Ankitects
Software: Anki
Version: 25.02.4
Software CPE: cpe:2.3:a:ankitects:anki:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anki version 25.02.4 Anki 25.02.4 is affected by 5 vulnerabilities: 1 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139909 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-64677
CWE-22 Medium
No
No
25.09.3 28.07.2026 SB20260728102
#VU139908 - Improper Access Control
CVE-2026-59153
CWE-284 Low
No
No
25.09.3 28.07.2026 SB20260728102
#VU139907 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-58266
CWE-22 Medium
No
No
25.09.4 28.07.2026 SB20260728101
#VU139906 - Uncontrolled Search Path Element
CVE-2025-62185
CWE-427 Medium
No
No
25.02.5 28.07.2026 SB2026072899
#VU139905 - Relative Path Traversal
CVE-2025-62187
CWE-23 High
No
No
25.02.6 28.07.2026 SB20260728100