https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:57:58.571107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349494 EUVD-2026-349494 2026-10-02T23:57:58.627452+00:00 EUVD-2026-349494 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64677 fkie_cve-2026-64677 2026-10-02T23:57:58.627495+00:00

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read local files through directory traversal. This issue is fixed in version 25.09.3.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-64677 UBUNTU-CVE-2026-64677 2026-10-02T23:57:58.627532+00:00

Affected: Ubuntu:16.04:LTS: anki, Ubuntu:18.04:LTS: anki, Ubuntu:20.04:LTS: anki, Ubuntu:22.04:LTS: anki, Ubuntu:24.04:LTS: anki

Anki is a program for creating and reviewing flashcards. Prior to 25.09.3, endpoints in Anki's local HTTP server do not adequately constrain requested media and built-in data paths, allowing scripts served from shared decks, or malicious websites combined with an origin-check bypass, to read local files through directory traversal. This issue is fixed in version 25.09.3.