| Release | Version |
|---|---|
| bookworm | 1.2.3-1 |
| trixie | 1.4.4-2 |
| forky | 1.4.12-2 |
| sid | 1.4.12-2 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| TEMP-1147701-003AAD | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | GHSA-484h-v688-jq5j: Source URL scheme bypasses sandboxed mode protections across multiple source subtypes |
| CVE-2026-86320 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | A flaw was found in flatpak-builder where Git hooks are not disabled w ... |
| Bug | Description |
|---|---|
| CVE-2026-39977 | flatpak-builder is a tool to build flatpaks from source. From 1.4.5 to ... |