Skip to content
OpenAdvisories

Package · Alpine

bubblewrap

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 10.0
    CVE-2024-42472

    Flatpak may allow access to files outside sandbox for certain apps

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.14.0 and 1.15.10, a malicious or compromised Flatpak app using persistent directories could access and write files outside of what it would otherwise have access to, whi…

    Flatpak Flatpak flatpak flatpak Debian Ubuntu Alpine
  • High 7.2
    CVE-2020-5291

    Privilege escalation in setuid mode via user namespaces in Bubblewrap

    Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable. This can in turn be…

    containers bubblewrap bubblewrap bubblewrap Debian Ubuntu Alpine