1 matches found
CVE-2026-38093: Improper Limitation of a Pathname to a Restricted Directory
filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...
3.3CVSS5.8AI score0.00162EPSS
SaveExploits0References2
20