| Package | Affected versions | Patched versions |
|---|---|---|
| xdg-desktop-portal | = 1.21.0< 1.20.4 | 1.20.4 |
Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host context via a symlink attack on g_file_trash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free