Re: Flatpak 1.18.1 fixes multiple vulnerabilities
Simon McVittie disclosed CVE identifiers for multiple vulnerabilities fixed in Flatpak 1.18.1, with two IDs still pending from MITRE.
Flatpak maintainer Simon McVittie announced that CVE IDs have finally been obtained for most of the vulnerabilities fixed in Flatpak 1.18.1, after GitHub's CNA failed to respond to requests. Assigned IDs include CVE-2026-90616, CVE-2026-96275, CVE-2026-96276, CVE-2026-96279, and CVE-2026-92162. Two identifiers remain pending, including one requested from MITRE (candidate ref CAN-2026-2052453), with others requested from Red Hat.
38