{
  "product": "Anki",
  "url": "https://patchblox.com/security/product/windows-app/anki",
  "summary": "The latest version of Anki is 2.1.65, released May 31, 2023. Patch Radar has 0 security fixes for Anki, closing 0 CVEs. 7 CVEs have no fix yet.",
  "platform": "windows-app",
  "vendor": "Anki",
  "supported": true,
  "latestVersion": "2.1.65",
  "latestReleased": "2023-05-31T00:00:00Z",
  "fixCount": 0,
  "cveCount": 0,
  "exploitedCveCount": 0,
  "unfixedCveCount": 7,
  "fixes": [],
  "noFixYet": [
    {
      "cveId": "CVE-2025-62185",
      "url": "https://patchblox.com/security/cve/CVE-2025-62185",
      "title": "Anki: Uncontrolled Search Path Element",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    },
    {
      "cveId": "CVE-2025-62186",
      "url": "https://patchblox.com/security/cve/CVE-2025-62186",
      "title": "Anki: Inclusion of Functionality from Untrusted Control Sphere",
      "priority": "High",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    },
    {
      "cveId": "CVE-2025-43703",
      "url": "https://patchblox.com/security/cve/CVE-2025-43703",
      "title": "Anki: Inclusion of Web Functionality from an Untrusted Source",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    },
    {
      "cveId": "CVE-2025-62187",
      "url": "https://patchblox.com/security/cve/CVE-2025-62187",
      "title": "Anki: Relative Path Traversal",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    },
    {
      "cveId": "CVE-2026-58266",
      "url": "https://patchblox.com/security/cve/CVE-2026-58266",
      "title": "Anki: User scripts in iframes have access to the internal Anki API",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    },
    {
      "cveId": "CVE-2026-59153",
      "url": "https://patchblox.com/security/cve/CVE-2026-59153",
      "title": "Anki\u0027s local HTTP server does not sufficiently validate requests",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    },
    {
      "cveId": "CVE-2026-64677",
      "url": "https://patchblox.com/security/cve/CVE-2026-64677",
      "title": "Anki\u0027s local HTTP server is vulnerable to directory traversal attacks",
      "priority": "Routine",
      "status": "no-fix",
      "affectedVersion": "2.1.65"
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}