Known vulnerabilities in flatpak-help

Vendor: openEuler
Software: flatpak-help
Software CPE: cpe:2.3:o:openeuler:flatpak-help:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting flatpak-help flatpak-help is affected by 15 known vulnerabilities: 1 high, 4 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141403 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-96282		 CWE-22 Low
No
No
 1.10.2-15 11.08.2026 SB2026081128
SB2026101672
SB2026110469
#VU125296 - Improper Access Control
CVE-2026-34078		 CWE-284 High
No
No
 1.0.3-14, 1.10.2-12 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 29 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34079		 CWE-22 Low
No
No
 1.0.3-14, 1.10.2-12 08.04.2026 SB2026040858
SB2026040865
SB2026040866
and 29 more
#VU125293 - Improper Access Control
CVE-2026-96283		 CWE-284 Low
No
No
 1.10.2-15 08.04.2026 SB2026040858
SB2026101672
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 1.10.2-9 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU88827 - Argument Injection or Modification
CVE-2024-32462		 CWE-88 Low
No
No
 1.0.3-12 19.04.2024 SB2024041902
SB2024041903
SB2024042944
and 29 more
#VU73856 - Improper input validation
CVE-2017-5226		 CWE-20 Medium
No
No
 1.0.3-6, 1.10.2-7 20.03.2023 SB2017032918
SB2019032618
SB2021101519
and 8 more
#VU73835 - Improper input validation
CVE-2023-28100		 CWE-20 Low
No
No
 1.0.3-15, 1.10.2-7 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 16 more
#VU73834 - Improper input validation
CVE-2023-28101		 CWE-20 Medium
No
No
 1.10.2-7 20.03.2023 SB2023032035
SB2023033142
SB2023033143
and 15 more
#VU59654 - Permissions, Privileges, and Access Controls
CVE-2021-43860		 CWE-264 Medium
No
No
 1.0.3-10 17.01.2022 SB2022011715
SB2022012525
SB2022051141
and 8 more
#VU57176 - Permissions, Privileges, and Access Controls
CVE-2021-41133		 CWE-264 Low
No
No
 1.0.3-7 08.10.2021 SB2021100815
SB2021101417
SB2021110212
and 17 more
#VU51443 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21381		 CWE-74 Medium
No
No
 1.0.3-5 14.03.2021 SB2021031112
SB2021031403
SB2021031408
and 11 more
#VU49587 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21261		 CWE-94 Low
No
No
 1.0.3-3 14.01.2021 SB2021011821
SB2021011822
SB2021012105
and 12 more
#VU32022 - Security Features
CVE-2019-10063		 CWE-254 Low
No
No
 1.0.3-6 26.03.2019 SB2019032618
SB2019050426
SB2019050662
and 3 more
#VU17726 - Permissions, Privileges, and Access Controls
CVE-2019-8308		 CWE-264 Low
No
No
 1.0.3-5 16.02.2019 SB2019021601
SB2019021813
SB2019021924
and 5 more