Skip to content
OpenAdvisories

Product · Flatpak

flatpak-builder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-39977

    flatpak-builder has a path traversal leading to arbitrary file read on host when installing licence files

    flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to before 1.4.8, the license-files manifest key takes an array of paths to user defined licence files relative to the source directory of the module. The paths from that array are resolved us…

    Flatpak flatpak-builder flatpak-builder flatpak-builder Debian Ubuntu