To report potential vulnerabilities, please see our security policy on https://dart.dev/security.
For advisories published for the Dart SDK, see security advisories.
Security: dart-lang/sdk
Security
SECURITY.md
-
Zip slip in Dart Pub package extractionGHSA-q739-79rh-vmvp published
Feb 23, 2026 by athomasLow -
Vulnerability: Auth Bypass in Dart due to incorrect parsing of the backslash characters in the URLGHSA-m9pm-2598-57rj published
Sep 28, 2022 by khyati82Moderate -
Auth Bypass in Dart SDK when handling cross origin redirectGHSA-c8mh-jj22-xg5h published
Feb 3, 2022 by mit-mitModerate -
Publishing to third-party package repositories may expose pub.dev credentialsGHSA-r32f-vhjp-qhj7 published
Dec 8, 2021 by mit-mitModerate -
Unsafe bidirectional unicode charactersGHSA-8pcp-6qc9-rqmv published
Dec 8, 2021 by mit-mitModerate -
XSS vulnerability in dart:htmlGHSA-3rfv-4jvg-9522 published
Apr 28, 2021 by mit-mitModerate -
XSS vulnerability in dart:htmlGHSA-hfq3-v9pv-p627 published
Mar 24, 2020 by kevmooModerate
Learn more about advisories related to dart-lang/sdk in the GitHub Advisory Database