DS
Product
Dart Software Development Kit
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 1
Watch
Add Dart Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3095 | 9.8 | Oct 27 | Incorrect parsing of the backslash characters in Dart library Affected: before 2.18.0 |
| CVE-2021-22568 | 8.8 | Dec 9 | When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for… Affected: before 2.15.0 |
| CVE-2026-27704 | 7.5 | Feb 25 | Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction Affected: before 3.11.0 |
| CVE-2022-0451 | 6.5 | Feb 18 | Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects Affected: before 2.16.0 |
| CVE-2021-22540 | 6.1 | Apr 22 | Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering Affected: before 2.12.3 |
| CVE-2020-8923 | 6.1 | Mar 26 | An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the… Affected: before 2.7.2; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +12 more |
| CVE-2021-22567 | 3.5 | Jan 5 | Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by… Affected: before 2.15.0 |
Showing 7