Link to the announcement[1], looks pretty bad.<p>[1]: <a href="https://github.com/flatpak/flatpak/security/advisories/GHSA-7hgv-f2j8-xw87">https://github.com/flatpak/flatpak/security/advisories/GHSA-...</a>