# Anki security updates

The latest version of Anki is 2.1.65, released May 31, 2023. Patch Radar has 0 security fixes for Anki, closing 0 CVEs. 7 CVEs have no fix yet.

- Web page: https://patchblox.com/security/product/windows-app/anki
- Platform: Windows apps
- Vendor: Anki
- Latest version: 2.1.65 (May 31, 2023)
- Supported: yes

## CVEs with no fix yet

| CVE | Priority | Title | Status |
|---|---|---|---|
| [CVE-2025-62185](https://patchblox.com/security/data/cve/CVE-2025-62185.md) | High | Anki: Uncontrolled Search Path Element | no-fix |
| [CVE-2025-62186](https://patchblox.com/security/data/cve/CVE-2025-62186.md) | High | Anki: Inclusion of Functionality from Untrusted Control Sphere | no-fix |
| [CVE-2025-43703](https://patchblox.com/security/data/cve/CVE-2025-43703.md) | Routine | Anki: Inclusion of Web Functionality from an Untrusted Source | no-fix |
| [CVE-2025-62187](https://patchblox.com/security/data/cve/CVE-2025-62187.md) | Routine | Anki: Relative Path Traversal | no-fix |
| [CVE-2026-58266](https://patchblox.com/security/data/cve/CVE-2026-58266.md) | Routine | Anki: User scripts in iframes have access to the internal Anki API | no-fix |
| [CVE-2026-59153](https://patchblox.com/security/data/cve/CVE-2026-59153.md) | Routine | Anki's local HTTP server does not sufficiently validate requests | no-fix |
| [CVE-2026-64677](https://patchblox.com/security/data/cve/CVE-2026-64677.md) | Routine | Anki's local HTTP server is vulnerable to directory traversal attacks | no-fix |

## Security fixes, newest first

No security fix is on record.

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo