Known vulnerabilities in sys-apps/flatpak

Vendor: Gentoo
Software: sys-apps/flatpak
Software CPE: cpe:2.3:o:gentoo:sys-apps_flatpak:*:*:*:*:*:gentoo_linux:*:*
Website:
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting sys-apps/flatpak sys-apps/flatpak is affected by 10 known vulnerabilities: 1 high, 4 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125296 - Improper Access Control
CVE-2026-34078		 CWE-284 High
No
No
 1.16.4 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 28 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34079		 CWE-22 Low
No
No
 1.16.4 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 28 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 1.4.10 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU88827 - Argument Injection or Modification
CVE-2024-32462		 CWE-88 Low
No
No
 1.14.6 19.04.2024 SB2024041902
SB2024041903
SB2024042944
and 29 more
#VU73835 - Improper input validation
CVE-2023-28100		 CWE-20 Low
No
No
 1.14.4 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 16 more
#VU73834 - Improper input validation
CVE-2023-28101		 CWE-20 Medium
No
No
 1.14.4 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 15 more
#VU59689 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-21682		 CWE-22 Medium
No
No
 1.14.4 18.01.2022 SB2022011811
SB2022012525
SB2022110837
and 8 more
#VU59654 - Permissions, Privileges, and Access Controls
CVE-2021-43860		 CWE-264 Medium
No
No
 1.14.4 17.01.2022 SB2022011715
SB2022012525
SB2022051141
and 8 more
#VU57176 - Permissions, Privileges, and Access Controls
CVE-2021-41133		 CWE-264 Low
No
No
 1.14.4 08.10.2021 SB2021100815
SB2021101417
SB2021110212
and 17 more
#VU51443 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21381		 CWE-74 Medium
No
No
 1.14.4 14.03.2021 SB2021031112
SB2021031403
SB2021031408
and 11 more