CVE-2022-3095

CVE-2022-3095 affects Dart/Flutter: the Dart URI class uses RFC 3986 syntax for backslash parsing, diverging from WhatWG URL standards and causing incompatibilities with \ in URIs. This can enable authentication bypass in web apps that parse URIs. Affected: Dart versions prior to 2.18 and Flutter...

CVE-2022-0451

The CVE-2022-0451 issue affects the Dart SDK (dart:io) where HTTPClient may include Authorization headers during cross-origin redirects. By default, HttpClient handles redirects, and headers that are set on the initial request could be sent to a redirect target if the redirect goes to an attacker...

CVE-2021-22567

Technical details about CVE-2021-22567 are not provided in the supplied documents. Monitor for updates from connected sources.

CVE-2021-22568

The CVE describes a vulnerability in the Dart toolchain where, during dart pub publish to a third‑party package server, the request is authenticated with an oauth2 access_token that is valid for pub.dev. An attacker obtaining these credentials can impersonate the user on pub.dev. The issue is mit...

CVE-2020-8923

CVE-2020-8923 describes an XSS in Dart via improper HTML sanitization that can be bypassed using DOM Clobbering. Affected: Dart SDK up to 2.7.1 and dev versions 2.8.0-dev.16.0 . Impact: attacker can inject custom HTML/JavaScript when user-provided data populates DOM nodes. Mitigation: upgrade to ...

CVE-2026-27704

The CVE-2026-27704 issue affects the Dart SDKs and Flutter SDKs prior to versions 3.11.0 and 3.41.0, respectively. During package extraction in the pub cache (via dart pub and flutter pub), a malicious package archive could cause files to be written outside the destination directory due to a path...

CVE-2021-22540

The CVE-2021-22540 issue affects the Dart SDK prior to 2.12.3. Root cause: bad validation logic in dart:html when creating DOM nodes from text, which did not sanitize template tags. Impact: enables cross-site scripting via DOM clobbering. Affected component: Dart SDK (web/dom handling). Remediati...