Code injection

2023-01-1106:15:00

PRIOn knowledge base

www.prio-n.com

code injection

personnummer

vulnerability

dart

nvd

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.5%

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.

CPENameOperatorVersion
personnummerlt3.0.3

CPE	Name	Operator	Version
	personnummer	lt	3.0.3

References

github.com/advisories/GHSA-4xh4-v2pq-jvhm

github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm