Flutter vulnerabilities
We track 3 vulnerabilities in Flutter products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2025.
Latest Flutter vulnerabilities
- 7.1 High severity
image_picker_android: Improper Limitation of a Pathname to a Restricted Directory
The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provid
- 7.1 High severity
file_selector_android: Improper Limitation of a Pathname to a Restricted Directory
The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that pro
- 9.8 Critical severity
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and…
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '\' characters in URIs, w