Priority LOW 29
The Dart and Flutter SDKs provide software development kits for the Dart programming language.
Vulnerabilities
4 records
TI-2024-36547 CVE-2024-54462
Unsanitized Filenames in Flutter package image_picker_android Allow File Overwrites
Priority LOW 11
The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers.
TI-2024-36546 CVE-2024-54461
Unsanitized Filenames in Flutter package file_selector_android Allow File Overwrites
Priority LOW 11
The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers.
Priority MEDIUM 51
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards.