Google Llc Dart Sdk
4 CVEs affecting Google Llc Dart Sdk. Latest disclosed: 2022-02-18. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22568 | High | 8.8 | 2021-12-09 | When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token th… |
CVE-2022-0451 | Medium | 6.5 | 2022-02-18 | Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly… |
CVE-2021-22540 | Medium | 6.1 | 2021-04-22 | Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for… |
CVE-2021-22567 | Medium | 4.6 | 2022-01-05 | Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a cod… |