Known vulnerabilities in flatpak-session-helper

Known vulnerabilities in flatpak-session-helper

Vendor: OpenAnolis

Software: flatpak-session-helper

Software CPE: cpe:2.3:o:openanolis:flatpak-session-helper:*:*:*:*:*:anolis_os:*:*

Website: https://openanolis.cn/

Total vulnerabilities: 17

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU152571 - Improper input validation CVE-2026-97027	CWE-20	Low	No	No	1.18.4-1	28.09.2026	SB20260928313 SB2026101561
#VU152569 - Creation of Temporary File With Insecure Permissions CVE-2026-97026	CWE-378	Low	No	No	1.18.4-1	28.09.2026	SB20260928313 SB2026101561
#VU152568 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-97023	CWE-22	Medium	No	No	1.18.4-1	28.09.2026	SB20260928313 SB2026101561
#VU152567 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-97024	CWE-22	Medium	No	No	1.18.4-1	28.09.2026	SB20260928313 SB2026101561
#VU152566 - Creation of Temporary File With Insecure Permissions CVE-2026-97025	CWE-378	Low	No	No	1.18.4-1	28.09.2026	SB20260928313 SB2026101561
#VU152565 - Improper isolation or compartmentalization CVE-2026-97029	CWE-653	Low	No	No	1.18.4-1	28.09.2026	SB20260928313 SB2026101561
#VU141408 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-96807	CWE-59	Low	No	No	1.18.4-1	11.08.2026	SB2026081128 SB2026101561
#VU141400 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-96808	CWE-22	Low	No	No	1.18.4-1	11.08.2026	SB2026081128 SB2026101248 SB2026101561
#VU125296 - Improper Access Control CVE-2026-34078	CWE-284	High	No	No	1.12.9-4, 1.16.4-1	08.04.2026	SB2026040858 SB2026040865 SB2026040866 and 29 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-34079	CWE-22	Low	No	No	1.12.9-4, 1.16.4-1	08.04.2026	SB2026040858 SB2026040865 SB2026040866 and 29 more
#VU96049 - UNIX Symbolic Link (Symlink) Following CVE-2024-42472	CWE-61	Low	No	No	1.12.9-3, 1.16.4-1	15.08.2024	SB2024081541 SB2024081542 SB2024081553 and 29 more
#VU88827 - Argument Injection or Modification CVE-2024-32462	CWE-88	Low	No	No	1.12.9-1, 1.15.8-1	19.04.2024	SB2024041902 SB2024041903 SB2024042944 and 29 more
#VU73856 - Improper input validation CVE-2017-5226	CWE-20	Medium	No	No	1.10.8-1.0.1	20.03.2023	SB2017032918 SB2019032618 SB2021101519 and 8 more
#VU73835 - Improper input validation CVE-2023-28100	CWE-20	Low	No	No	1.10.8-1.0.1	20.03.2023	SB2023032035 SB2023033142 SB2023033143 and 16 more
#VU73834 - Improper input validation CVE-2023-28101	CWE-20	Medium	No	No	1.10.8-1.0.1	20.03.2023	SB2023032035 SB2023033142 SB2023033143 and 15 more
#VU59654 - Permissions, Privileges, and Access Controls CVE-2021-43860	CWE-264	Medium	No	No	1.8.7-1	17.01.2022	SB2022011715 SB2022012525 SB2022051141 and 8 more
#VU57176 - Permissions, Privileges, and Access Controls CVE-2021-41133	CWE-264	Low	No	No	1.6.2-6, 1.8.5-4	08.10.2021	SB2021100815 SB2021101417 SB2021110212 and 17 more