Known vulnerabilities in flatpak-libs

Vendor: OpenAnolis
Software: flatpak-libs
Software CPE: cpe:2.3:o:openanolis:flatpak-libs:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting flatpak-libs flatpak-libs is affected by 17 known vulnerabilities: 1 high, 5 medium, 11 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152571 - Improper input validation
CVE-2026-97027		 CWE-20 Low
No
No
 1.18.4-1 28.09.2026 SB20260928313
SB2026101561
#VU152569 - Creation of Temporary File With Insecure Permissions
CVE-2026-97026		 CWE-378 Low
No
No
 1.18.4-1 28.09.2026 SB20260928313
SB2026101561
#VU152568 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-97023		 CWE-22 Medium
No
No
 1.18.4-1 28.09.2026 SB20260928313
SB2026101561
#VU152567 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-97024		 CWE-22 Medium
No
No
 1.18.4-1 28.09.2026 SB20260928313
SB2026101561
#VU152566 - Creation of Temporary File With Insecure Permissions
CVE-2026-97025		 CWE-378 Low
No
No
 1.18.4-1 28.09.2026 SB20260928313
SB2026101561
#VU152565 - Improper isolation or compartmentalization
CVE-2026-97029		 CWE-653 Low
No
No
 1.18.4-1 28.09.2026 SB20260928313
SB2026101561
#VU141408 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-96807		 CWE-59 Low
No
No
 1.18.4-1 11.08.2026 SB2026081128
SB2026101561
#VU141400 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-96808		 CWE-22 Low
No
No
 1.18.4-1 11.08.2026 SB2026081128
SB2026101248
SB2026101561
#VU125296 - Improper Access Control
CVE-2026-34078		 CWE-284 High
No
No
 1.12.9-4, 1.16.4-1 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 29 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34079		 CWE-22 Low
No
No
 1.12.9-4, 1.16.4-1 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 29 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 1.0.9-15, 1.12.9-3, 1.16.4-1 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU88827 - Argument Injection or Modification
CVE-2024-32462		 CWE-88 Low
No
No
 1.0.9-13, 1.12.9-1, 1.15.8-1 19.04.2024 SB2024041902
SB2024041903
SB2024042944
and 29 more
#VU73856 - Improper input validation
CVE-2017-5226		 CWE-20 Medium
No
No
 1.10.8-1.0.1 20.03.2023 SB2017032918
SB2019032618
SB2021101519
and 8 more
#VU73835 - Improper input validation
CVE-2023-28100		 CWE-20 Low
No
No
 1.10.8-1.0.1 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 16 more
#VU73834 - Improper input validation
CVE-2023-28101		 CWE-20 Medium
No
No
 1.10.8-1.0.1 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 15 more
#VU59654 - Permissions, Privileges, and Access Controls
CVE-2021-43860		 CWE-264 Medium
No
No
 1.8.7-1 17.01.2022 SB2022011715
SB2022012525
SB2022051141
and 8 more
#VU57176 - Permissions, Privileges, and Access Controls
CVE-2021-41133		 CWE-264 Low
No
No
 1.6.2-6, 1.8.5-4 08.10.2021 SB2021100815
SB2021101417
SB2021110212
and 17 more