flatpak vulnerabilities (Debian)
34 vulnerabilities.
-
flatpakDebian Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group 5.7 Medium -
flatpakDebian Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc 7.1 High -
flatpakDebian Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files 3.6 Low -
flatpakDebian Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path 3.9 Low -
flatpakDebian Flatpak: flatpak: world-readable oci authentication token in system-helper cache path 3.2 Low -
flatpakDebian Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin 7.1 High -
flatpakDebian Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following 2.5 Low -
flatpakDebian Flatpak: flatpak: extension metadata path traversal file existence oracle 3.1 Low -
flatpakDebian Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull 3.3 Low -
flatpakDebian Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes 6.2 Medium -
flatpakDebian Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems 7.5 High -
flatpakDebian Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks 6.5 Medium -
flatpakDebian Important: flatpak security update 7.4 High -
flatpakDebian flatpak: Fix of CVE-2026-96807 4.0 Medium -
flatpakDebian Flatpak: flatpak: arbitrary write in host context via flatpak build-init 6.5 Medium -
flatpakDebian Flatpak: flatpak: arbitrary write access as root via extra-data extraction 8.8 High -
flatpakDebian Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream 7.2 High -
flatpakDebian In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to... 7.4 High -
flatpakDebian Flatpak affected by arbitrary file deletion on the host filesystem 8.7 High -
flatpakDebian Flatpak has a complete sandbox escape leading to host file access and code execution in the host context 9.3 Critical -
flatpakDebian Flatpak may allow access to files outside sandbox for certain apps 10.0 Critical -
flatpakDebian Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing 8.4 High -
flatpakDebian Flatpak metadata with ANSI control codes can cause misleading terminal output 5.0 Medium -
flatpakDebian TIOCLINUX can send commands outside sandbox if running on a virtual console 10.0 Critical -
flatpakDebian flatpak-builder can access files outside the build directory. 7.7 High -
flatpakDebian Permissions granted to applications can be hidden from the user at install time 8.2 High -
flatpakDebian Sandbox bypass via recent VFS-manipulating syscalls 8.8 High -
flatpakDebian Sandbox escape via special tokens in .desktop file 7.1 High -
flatpakDebian flatpak - regression update No score -
flatpakDebian Flatpak sandbox escape via spawn portal 7.3 High -
flatpakDebian Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox... 9.0 Critical -
flatpakDebian Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script... 8.2 High -
flatpakDebian In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3,... 8.8 High -
flatpakDebian In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain... 7.8 High