flatpak

Direct Vulnerabilities

Known vulnerabilities in the flatpak package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Symlink Following	<1.16.6-1~deb13u3
H Symlink Following	<1.16.6-1~deb13u3
L Improper Input Validation	<1.16.6-1~deb13u3
L Creation of Temporary File With Insecure Permissions	<1.16.6-1~deb13u3
M Insufficient Compartmentalization	<1.16.6-1~deb13u3
L Creation of Temporary File With Insecure Permissions	<1.16.6-1~deb13u3
L Symlink Following	<1.16.6-1~deb13u2
L Symlink Following	<1.16.6-1~deb13u2
L Missing Authorization	<1.16.4-1
L Link Following	<1.16.6-1~deb13u2
H Numeric Truncation Error	<1.16.6-1~deb13u2
H Directory Traversal	<1.16.6-1~deb13u2
L Link Following	<1.16.6-1~deb13u1
M Improper Access Control	<1.16.6-1~deb13u2
M Directory Traversal	<1.16.6-1~deb13u2
L CVE-2026-92162	<1.16.6-1~deb13u3
L Symlink Following	<1.16.6-1~deb13u3
H Directory Traversal	<1.16.6-1~deb13u1
C Symlink Following	<1.16.6-1~deb13u1
L CVE-2024-42472	<1.14.10-1
L CVE-2024-32462	<1.14.6-1
M Improper Encoding or Escaping of Output	<1.14.4-1
M CVE-2023-28100	<1.14.4-1
M Directory Traversal	<1.12.3-1
H Incorrect Default Permissions	<1.12.3-1
H Improper Input Validation	<1.12.1-1
H Arbitrary Code Injection	<1.10.1-4
H Arbitrary Code Injection	<1.8.5-1
C Improper Input Validation	<1.2.3-2
H Exposure of Resource to Wrong Sphere	<1.2.3-1
H Interpretation Conflict	<0.10.3-1
H Incorrect Permission Assignment for Critical Resource	<0.8.7-1