flatpak vulnerabilities (SUSE)
24 vulnerabilities.
-
flatpakSUSE Flatpak: flatpak: extension metadata path traversal file existence oracle 3.1 Low -
flatpakSUSE Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull 3.3 Low -
flatpakSUSE Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes 6.2 Medium -
flatpakSUSE Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems 7.5 High -
flatpakSUSE Important: flatpak security update 7.4 High -
flatpakSUSE flatpak: Fix of CVE-2026-96807 4.0 Medium -
flatpakSUSE Flatpak: flatpak: arbitrary write in host context via flatpak build-init 6.5 Medium -
flatpakSUSE Flatpak: flatpak: arbitrary write access as root via extra-data extraction 8.8 High -
flatpakSUSE Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream 7.2 High -
flatpakSUSE In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to... 7.4 High -
flatpakSUSE Flatpak affected by arbitrary file deletion on the host filesystem 8.7 High -
flatpakSUSE Flatpak has a complete sandbox escape leading to host file access and code execution in the host context 9.3 Critical -
flatpakSUSE Flatpak may allow access to files outside sandbox for certain apps 10.0 Critical -
flatpakSUSE Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing 8.4 High -
flatpakSUSE Flatpak metadata with ANSI control codes can cause misleading terminal output 5.0 Medium -
flatpakSUSE TIOCLINUX can send commands outside sandbox if running on a virtual console 10.0 Critical -
flatpakSUSE flatpak-builder can access files outside the build directory. 7.7 High -
flatpakSUSE Permissions granted to applications can be hidden from the user at install time 8.2 High -
flatpakSUSE Sandbox bypass via recent VFS-manipulating syscalls 8.8 High -
flatpakSUSE Sandbox escape via special tokens in .desktop file 7.1 High -
flatpakSUSE Flatpak sandbox escape via spawn portal 7.3 High -
flatpakSUSE An issue was discovered in GNOME Nautilus 3.30 prior to 3.30.6 and 3.32 prior to 3.32.1. A... 7.8 High -
flatpakSUSE An issue was discovered in GNOME gnome-desktop 3.26, 3.28, and 3.30 prior to 3.30.2.2, and 3.32... 9.0 Critical -
flatpakSUSE Flatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script... 8.2 High