dio vulnerabilities

1 known vulnerability in dio from Cfug. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  dio: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-103030Oct 13, 2026Cfug

  Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.headers into the redirected HTTP/2 request without comparing the source and destinatio