XD
Product
xdg-desktop-portal
3
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add xdg-desktop-portal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40354 | 6.3 | Apr 11 | Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash Affected: before 1.20.4; 1.21.0 before 1.21.1 |
Showing 1