Flatpak is a Linux application sandboxing and distribution framework.
A vulnerability has been discovered in Flatpak. Please review the CVE identifier referenced below for details.
A malicious or compromised Flatpak app could execute arbitrary code outside its sandbox in conjunction with xdg-desktop-portal.
There is no known workaround at this time.
All Flatpak users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-apps/flatpak-1.14.6"