DS
Product
Dart Software Development Kit
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 3Low 1
Watch
Add Dart Software Development Kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-0451 | 6.5 | Feb 18 | Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects Affected: before 2.16.0 |
| CVE-2021-22540 | 6.1 | Apr 22 | Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering Affected: before 2.12.3 |
| CVE-2020-8923 | 6.1 | Mar 26 | An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the… Affected: before 2.7.2; 2.8.0; 2.8.0; 2.8.0; 2.8.0; 2.8.0; +12 more |
Showing 3