flatpak-builder vulnerabilities
CVEs whose affected-version data names the flatpak-builder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-107466Medium· 6.1A flaw was found in flatpak-builder
A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration (CI) system to process a crafted build manifest. By specifying local file Uniform R…
▾ SunlitRed Hat · flatpak-builderEPSS 0.19%via NVD
CVE-2026-86320High· 7.8PoCA flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on…
▾ MidnightRed Hat · flatpak-builderEPSS 0.29%via NVD