XD
Product
xdg-desktop-portal
3
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add xdg-desktop-portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55888 New | 8.8 | Oct 23 | XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal Affected: < 1.22.1 |
| CVE-2026-55889 New | 8.3 | Oct 23 | XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key Affected: < 1.22.1 |
| CVE-2026-40354 | 6.3 | Apr 11 | Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash Affected: before 1.20.4; 1.21.0 before 1.21.1 |
Showing 3