flatpak-builder vulnerabilities

CVEs whose affected-version data names the flatpak-builder package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-86320High· 7.8PoC

5d ago

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on…

▾ MidnightRed Hat · flatpak-builderEPSS 0.22%via NVD