Known vulnerabilities in flatpak (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:flatpak_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting flatpak (Ubuntu package) flatpak (Ubuntu package) is affected by 6 known vulnerabilities: 1 high, 1 medium, 4 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125296 - Improper Access Control
CVE-2026-34078
CWE-284 High
No
No
1.6.5-0ubuntu0.5+esm1, 1.12.7-1ubuntu0.1+esm1, 1.14.6-1ubuntu0.1+esm1 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 30 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34079
CWE-22 Low
No
No
1.0.9-0ubuntu0.4+esm1, 1.6.5-0ubuntu0.5+esm1, 1.12.7-1ubuntu0.1+esm1, 1.14.6-1ubuntu0.1+esm1 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 30 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472
CWE-61 Low
No
No
1.6.5-0ubuntu0.5, 1.12.7-1ubuntu0.1, 1.14.6-1ubuntu0.1 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU57176 - Permissions, Privileges, and Access Controls
CVE-2021-41133
CWE-264 Low
No
No
1.0.9-0ubuntu0.4, 1.6.5-0ubuntu0.4, 1.10.2-1ubuntu1.1, 1.10.2-3ubuntu0.1 08.10.2021 SB2021100815
SB2021101417
SB2021110212
and 17 more
#VU51443 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21381
CWE-74 Medium
No
No
1.0.9-0ubuntu0.3, 1.6.5-0ubuntu0.3, 1.8.2-1ubuntu0.2 14.03.2021 SB2021031112
SB2021031403
SB2021031408
and 11 more
#VU49587 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21261
CWE-94 Low
No
No
1.0.9-0ubuntu0.2, 1.6.5-0ubuntu0.2, 1.8.2-1ubuntu0.1 14.01.2021 SB2021011821
SB2021011822
SB2021012105
and 12 more