aqt vulnerabilities (PyPI)

2 vulnerabilities.

• aqt PyPI Anki's local HTTP server does not sufficiently validate requests CVE-2026-59153 Fix available 2.1 LowJune 19, 2026
• aqt PyPI Anki: User scripts in iframes have access to the internal Anki API CVE-2026-58266 Fix available 6.5 MediumJune 19, 2026