Browse CVEs

MEDIUM 6.3 CVE-2026-40354 Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack o… Xdg Desktop Portal 1.20.4+ Fix from $1,6002026-04-11 MEDIUM 6.3 CVE-2026-39977 flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user d… Flatpak Builder 1.4.8+ Fix from $1,6002026-04-09 HIGH 7.5 CVE-2026-34079 Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the caching for ld.so removes outdated cache files without pro… Flatpak 1.16.4+ Fix from $1,9502026-04-07 CRITICAL 10.0 CVE-2026-34078 Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options… Flatpak after 1.16.3 Fix from $2,3002026-04-07 MEDIUM 5.5 CVE-2026-34080 xdg-dbus-proxy is a filtering proxy for D-Bus connections. Prior to 0.1.7, a policy parser vulnerability allows bypassing eavesdrop restrictions. The… Xdg Dbus Proxy 0.1.7+ Fix from $1,6002026-04-07 MEDIUM 6.5 CVE-2023-28100 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.… Flatpak 1.10.8 / 1.12.8+ Fix from $1,6002023-03-16 CRITICAL 9.0 CVE-2019-10063 Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-522… Flatpak 1.0.8 / 1.2.4+ Fix from $2,3002019-03-26