Cfug vulnerabilities
We track 1 vulnerability in Cfug products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Cfug vulnerabilities
- 7.5 High severity
dio: Exposure of Sensitive Information to an Unauthorized Actor
Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.headers into the redirected HTTP/2 request without comparing the source and destinatio