aqt (2.1.33) potentially affected by CVE-2024-29073 via anki (2.1.33)

anki PYPI version 2.1.33 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.33 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

anki-sync-server (2.4.0) potentially affected by CVE-2024-29073 via anki (2.1.49)

anki PYPI version 2.1.49 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - anki-sync-server 2.4.0 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

aqt (2.1.29) potentially affected by CVE-2024-29073 via anki (2.1.29)

anki PYPI version 2.1.29 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.29 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

aqt (2.1.31) potentially affected by CVE-2024-29073 via anki (2.1.31)

anki PYPI version 2.1.31 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.31 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

aqt (2.1.34) potentially affected by CVE-2024-29073 via anki (2.1.34)

anki PYPI version 2.1.34 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.34 Source cves: CVE-2024-29073 Source advisory: OSV:PYSEC-2026-1118...

arete (>=2.0.0, <=2.0.1) potentially affected by CVE-2024-29073 via anki (24.4.1)

anki PYPI version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - arete =2.0.0, =2.0.1 Source cves: CVE-2024-29073 Source advisory: SNYK:PYTHON-ANKI-12671206...

CVE-2024-29073

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. ...

Linux Distros Unpatched Vulnerability : CVE-2024-29073

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes...

CVE-2024-29073

creationtimestamp| type| source ---|---|--- 2024-07-22 17:50:05+00:00| seen| https://t.me/cvedetector/1460...

arete (>=2.0.0, <=2.0.1) potentially affected by CVE-2024-29073 via anki (24.4.1)

anki PYPI version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - arete =2.0.0, =2.0.1 Source cves: CVE-2024-29073 Source advisory: GHSA-X3R6-CCVQ-CF5V...

aqt (2.1.31) potentially affected by CVE-2024-29073 via anki (2.1.31)

anki PYPI version 2.1.31 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.31 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

aqt (2.1.26) potentially affected by CVE-2024-29073 via anki (2.1.26)

anki PYPI version 2.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.26 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

apyanki (>=0.15.0, <=0.16.0) potentially affected by CVE-2024-29073 via anki (23.12.1)

anki PYPI version 23.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - apyanki =0.15.0, =0.16.0 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

aqt (2.1.29) potentially affected by CVE-2024-29073 via anki (2.1.29)

anki PYPI version 2.1.29 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.29 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

aqt (2.1.35) potentially affected by CVE-2024-29073 via anki (2.1.35)

anki PYPI version 2.1.35 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.35 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

arete (>=2.0.0, <=2.0.1) potentially affected by CVE-2024-29073 via anki (24.4.1)

anki PYPI version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - arete =2.0.0, =2.0.1 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

aqt (2.1.33) potentially affected by CVE-2024-29073 via anki (2.1.33)

anki PYPI version 2.1.33 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.33 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

aqt (2.1.32) potentially affected by CVE-2024-29073 via anki (2.1.32)

anki PYPI version 2.1.32 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - aqt 2.1.32 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

CVE-2024-29073

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. ...

CVE-2024-29073

Anki (Ankitects) 24.04 is affected by CVE-2024-29073 due to incomplete sanitization of LaTeX: the verbatim package is not properly handled, enabling a specially crafted flashcard to read arbitrary files. The issue is triggered by sharing a flashcard; no fix/version remediation is provided in the ...