Skip to content
OpenAdvisories

Ecosystem

Pub

12 known vulnerabilities.

Most affected packages

archive 2 shared_preferences_android 1 http 1 personnummer 1 dio 1 dio_http2_adapter 1 agent_dart 1 serverpod_client 1 serverpod_auth_server 1 jose 1 pubnub 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-29886

    Improved security for stored password hashes

    Serverpod is an app and web server, built for the Flutter and Dart ecosystem. An issue was identified with the old password hash algorithm that made it susceptible to rainbow attacks if the database was compromised. This vulnerability is fixed by 1.2.6.

    serverpod serverpod serverpod_auth_server Pub
  • Medium 5.9
    CVE-2023-26154

    pubnub Insufficient Entropy vulnerability

    Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions …

    com.pubnub:pubnub pubnub github.com/pubnub/go github.com/pubnub/go/v5 npm Packagist Maven PyPI Go crates.io NuGet RubyGems SwiftURL Pub
  • Medium 5.3
    CVE-2023-22963

    personnummer/dart vulnerable to Improper Input Validation

    The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.

    personnummer Pub
  • Medium 6.1
    CVE-2020-35669 Public exploit

    http before 0.13.3 vulnerable to header injection

    An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to achieve CRLF injection in an HTTP request.

    http Pub