Skip to content
OpenAdvisories
High DSA-4830-1 1 CVE

flatpak - security update

Published Jan 14, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 flatpak 1.2.5-0+deb10u2

Vulnerabilities 1

  • High 7.3

    Flatpak sandbox escape via spawn portal

    Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape). Th…