Dart Software Development Kit
Dart · 7 CVEs
CVE-2026-27704
MEDIUM
Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction
Feb 25, 2026
CVE-2022-3095
CRITICAL
Incorrect parsing of the backslash characters in Dart library
Oct 27, 2022
CVE-2022-0451
MEDIUM
Auth bypass in Dark SDK
Feb 18, 2022
CVE-2021-22567
MEDIUM
Bidirectional Override in Dart SDK
Jan 5, 2022
CVE-2021-22568
HIGH
Dart - Publishing to third-party package repositories may expose pub.dev credentials
Dec 9, 2021
CVE-2021-22540
MEDIUM
XSS in Dart SDK
Apr 22, 2021
CVE-2020-8923
MEDIUM
XSS in Dart
Mar 26, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-27704 | Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction | MEDIUM | 0.54% | Feb 25, 2026 |
| CVE-2022-3095 | Incorrect parsing of the backslash characters in Dart library | CRITICAL | 0.97% | Oct 27, 2022 |
| CVE-2022-0451 | Auth bypass in Dark SDK | MEDIUM | 1.00% | Feb 18, 2022 |
| CVE-2021-22567 | Bidirectional Override in Dart SDK | MEDIUM | 0.60% | Jan 5, 2022 |
| CVE-2021-22568 | Dart - Publishing to third-party package repositories may expose pub.dev credentials | HIGH | 0.94% | Dec 9, 2021 |
| CVE-2021-22540 | XSS in Dart SDK | MEDIUM | 0.68% | Apr 22, 2021 |
| CVE-2020-8923 | XSS in Dart | MEDIUM | 0.32% | Mar 26, 2020 |
Showing 1 to 7 of 7 CVEs