FL
Product
flatpak
19
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 12Medium 4Low 0
Watch
Add flatpak to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-28100 | 6.5 | Mar 16 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux Affected: before 1.10.8; 1.12.0 before 1.12.8; 1.14.0 before 1.14.4; 1.15.0 before 1.15.4 |
| CVE-2022-21682 | 6.5 | Jan 13 | Flatpak is a Linux application sandboxing and distribution framework Affected: before 1.10.7; 1.11.1 before 1.12.4 |
| CVE-2023-28101 | 4.3 | Mar 16 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux Affected: before 1.10.8; 1.12.0 before 1.12.8; 1.14.0 before 1.14.4; 1.15.0 before 1.15.4 |
| CVE-2026-96807 | 4.0 | Sep 23 | In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files at an arbitrary location Affected: before 1.18.1 |
Showing 4