What's Changed
⚠️ This update contains important security fixes. Please upgrade as soon as possible.
- Shared decks could execute arbitrary code via iframes when viewed in the editor (GHSA-j9v5-m549-cg6c). Thanks to @DePierre for the report.
- On macOS, shared decks could execute arbitrary commands via specially crafted image filenames when the "Show in Folder" editor action is used (GHSA-gfvm-4968-jp9m). Thanks to @hyperreality and @Hama1cco for the reports.
- Compromised eMudhra intermediate CA certificates are now disallowed. This is in response to a widespread security incident affecting most systems and web browsers. Updating Anki might not be enough. Please make sure your system is fully up to date.
Full Changelog: 26.09.3...26.09.4