Dart vulnerabilities
We track 2 vulnerabilities in Dart products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 25, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Dart vulnerabilities
- 7.5 High severity
sdk: Improper Limitation of a Pathname to a Restricted Directory
The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart SDK prior to 3.11.0 and the Flutter SDK prior to version 3.41.0, when the pub client (`dart pub` and `flutter pub`) extracts a package in the
- 9.8 Critical severity
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and…
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '\' characters in URIs, w