Skip to content
OpenAdvisories

Product · Google

Dart SDK

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-22568

    Dart - Publishing to third-party package repositories may expose pub.dev credentials

    When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate…

    Google Dart SDK