579170 matches found
CVE-2026-97027
Flatpak passes through arbitrary vendor-extension keys unmodified when exporting an application's Desktop Entry .desktop and D-Bus Service .service files, instead of validating against an allowlist. A malicious Flatpak app can use this to cause denial of service e.g. forced application restart...
CVE-2026-97026
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
CVE-2026-97025
Flatpak writes the OCI repository authentication token with world-readable permissions 0644 in the system-helper's cache directory, allowing other local users on a multi-user system to read the token and impersonate the authenticated user against the OCI repository. Only OCI-based sources e.g. as...
CVE-2026-102277
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted a,b-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The...
CVE-2026-19666 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-19667 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-75029 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-81563 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-38FX-CM5X-27PG vulnerabilities
Vulnerabilities for packages: bind...
GHSA-M9XV-GF7Q-4VJG vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-19668 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-78301 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-M66J-G9Q7-JXJG vulnerabilities
Vulnerabilities for packages: bind...
GHSA-PQFM-7X4V-9W63 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-QRRF-RHQ5-MVXV vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-19033 vulnerabilities
Vulnerabilities for packages: bind...
CVE-2026-76163 vulnerabilities
Vulnerabilities for packages: bind...
GHSA-2RPH-FG4H-9HJQ vulnerabilities
Vulnerabilities for packages: bind...