Skip to content
OpenAdvisories

Package · Pub

dio_http2_adapter

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-103030

    Dio: Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`

    Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.headers into the redirected HTTP/2 request without comparing the source and destinati…

    cfug dio dio_http2_adapter Pub