Flutter

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Flutter records in CISA KEV

No Flutter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flutter 2 records MEDIUM File Selector Android 1 record LOW Image Picker Android 1 record LOW

Records

2 records in Flutter · all components

TI-2022-02856 CVE-2022-3095

Incorrect parsing of the backslash characters in Dart library

MEDIUM 51

The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01164 Published 2022-10-27 Fixed in 2.18.2, 3.3.3 CWE-20

TI-2026-22080 CVE-2026-27704

Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction

LOW 29

The Dart and Flutter SDKs provide software development kits for the Dart programming language.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00408 Published 2026-02-25 Fixed in 3.11.0, 3.41.0 CWE-22

Open these records in search →

Critical	1
High	0
Medium	1
Low	2
No CVSS	0