Flatpak

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 22, 2026
Last mentionedSep 28, 2026

Timeline

2 articles · newest first

Flatpak 1.18.4 fixes multiple security vulnerabilities

Flatpak 1.18.4 fixes multiple security vulnerabilities and hardens against symlink traversal issues tracked as CVE-2026-97023 and CVE-2026-97024.

oss-securitySep 28, 14:45 UTC · Sep 28, 2026VulnerabilityCVE-2026-97023 CVE-2026-970242 · 2 reads

Re: Flatpak 1.18.1 fixes multiple vulnerabilities

Simon McVittie disclosed CVE identifiers for multiple vulnerabilities fixed in Flatpak 1.18.1, with two IDs still pending from MITRE.

oss-securitySep 22, 21:52 UTC · Sep 22, 2026VulnerabilityCVE-2026-90616 CVE-2026-96275 CVE-2026-96276+21

Related CVEs

by mentions

CVE-2026-962758.8
Path Traversal Leading to Root Write in Flatpak
published Sep 23, 2026Flatpak Project Flatpak
CVE-2026-906167.4
Symlink escape in Flatpak before 1.18.1 lets sandboxed apps read/write host files
published Sep 12, 2026Flatpak
CVE-2026-92162<1%7.2
Path traversal in Flatpak before 1.18.1 with an OCI remote
published 22d agoFlatpakPoC
CVE-2026-970247.1
Flatpak path traversal can empty or symlink host files
published Sep 29, 2026Flatpak project Flatpak
CVE-2026-970237.1
Path Traversal in Flatpak export/bin Lets Malicious Apps Delete Files as Root
published Sep 28, 2026Flatpak
CVE-2026-962796.5
Hardlink file disclosure in Flatpak OCI app installs
published Sep 27, 2026Flatpak project Flatpak
CVE-2026-962766.5
Path traversal in Flatpak build-init SDK extensions writes files outside build directory
published Sep 23, 2026Flatpak project (freedesktop.org) Flatpak

Appears with

Simon McVittieorganization · 2
Red Hatorganization · 1
MITREorganization · 1

Entities are extracted by the model from each article. First seen Sep 22, 2026, last mentioned Sep 28, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.