#sandbox

Flatpak 1.18.1 plugs sandbox escapes and local root escalations

The stable update closes symlink and path-traversal flaws that broke app isolation, with CVE IDs still pending.