Known vulnerabilities in flatpak

Known vulnerabilities in flatpak

Vendor: openEuler

Software: flatpak

Software CPE: cpe:2.3:o:openeuler:flatpak:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 15

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU141403 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-96282	CWE-22	Low	No	No	1.10.2-15	11.08.2026	SB2026081128 SB2026101672 SB2026110469
#VU125296 - Improper Access Control CVE-2026-34078	CWE-284	High	No	No	1.0.3-14, 1.10.2-12	08.04.2026	SB2026040858 SB2026040865 SB2026040866 and 29 more
#VU125295 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-34079	CWE-22	Low	No	No	1.0.3-14, 1.10.2-12	08.04.2026	SB2026040858 SB2026040865 SB2026040866 and 29 more
#VU125293 - Improper Access Control CVE-2026-96283	CWE-284	Low	No	No	1.10.2-15	08.04.2026	SB2026040858 SB2026101672
#VU96049 - UNIX Symbolic Link (Symlink) Following CVE-2024-42472	CWE-61	Low	No	No	1.10.2-9	15.08.2024	SB2024081541 SB2024081542 SB2024081553 and 29 more
#VU88827 - Argument Injection or Modification CVE-2024-32462	CWE-88	Low	No	No	1.0.3-12	19.04.2024	SB2024041902 SB2024041903 SB2024042944 and 29 more
#VU73856 - Improper input validation CVE-2017-5226	CWE-20	Medium	No	No	1.0.3-6, 1.10.2-7	20.03.2023	SB2017032918 SB2019032618 SB2021101519 and 8 more
#VU73835 - Improper input validation CVE-2023-28100	CWE-20	Low	No	No	1.0.3-15, 1.10.2-7	20.03.2023	SB2023032035 SB2023033142 SB2023033143 and 16 more
#VU73834 - Improper input validation CVE-2023-28101	CWE-20	Medium	No	No	1.10.2-7	20.03.2023	SB2023032035 SB2023033142 SB2023033143 and 15 more
#VU59654 - Permissions, Privileges, and Access Controls CVE-2021-43860	CWE-264	Medium	No	No	1.0.3-10	17.01.2022	SB2022011715 SB2022012525 SB2022051141 and 8 more
#VU57176 - Permissions, Privileges, and Access Controls CVE-2021-41133	CWE-264	Low	No	No	1.0.3-7	08.10.2021	SB2021100815 SB2021101417 SB2021110212 and 17 more
#VU51443 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2021-21381	CWE-74	Medium	No	No	1.0.3-5	14.03.2021	SB2021031112 SB2021031403 SB2021031408 and 11 more
#VU49587 - Improper Control of Generation of Code ('Code Injection') CVE-2021-21261	CWE-94	Low	No	No	1.0.3-3	14.01.2021	SB2021011821 SB2021011822 SB2021012105 and 12 more
#VU32022 - Security Features CVE-2019-10063	CWE-254	Low	No	No	1.0.3-6	26.03.2019	SB2019032618 SB2019050426 SB2019050662 and 3 more
#VU17726 - Permissions, Privileges, and Access Controls CVE-2019-8308	CWE-264	Low	No	No	1.0.3-5	16.02.2019	SB2019021601 SB2019021813 SB2019021924 and 5 more