OSV - Open Source Vulnerabilities

GHSA-vm9r-h74p-hg97

Pub/jose

jose vulnerable to untrusted JWK header key acceptance during signature verification

31 Mar

Fix available
Severity - 7.5 (High)

GHSA-3hpf-ff72-j67p

Pub/shared_preferences_android

shared_preferences_android vulnerability

06 Dec 2024

Fix available
Severity - 3.0 (Low)

GHSA-fmj7-7gfw-64pg

Pub/agent_dart

Agent Dart is missing certificate verification checks

15 Oct 2024

Fix available
Severity - 7.6 (High)

GHSA-r75m-26cq-mjxc

Pub/serverpod_auth_server

Serverpod improved security for stored password hashes

28 Mar 2024

Fix available
Severity - 5.3 (Medium)

GHSA-h6x7-r5rg-x5fw

Pub/serverpod_client

Serverpod client accepts any certificate

28 Mar 2024

Fix available
Severity - 7.4 (High)

GHSA-5844-q3fc-56rh

Go/github.com/pubnub/go
Go/github.com/pubnub/go/v5
Go/github.com/pubnub/go/v6
Go/github.com/pubnub/go/v7
Maven/com.pubnub:pubnub
... 9 more

pubnub Insufficient Entropy vulnerability

06 Dec 2023

Fix available
Severity - 5.9 (Medium)

GHSA-9v85-q87q-g4vg

Pub/archive

Path traversal in Archive

31 Aug 2023

Fix available
Severity - 7.8 (High)

GHSA-r285-q736-9v95

Pub/archive

Filename spoofing in archive

31 Aug 2023

Fix available
Severity - 7.8 (High)

GHSA-9324-jv53-9cc8

Pub/dio

dio vulnerable to CRLF injection with HTTP method string

21 Mar 2023

Fix available
Severity - 7.5 (High)

GHSA-4xh4-v2pq-jvhm

Pub/personnummer

personnummer/dart vulnerable to Improper Input Validation

19 Sep 2022

Fix available

GHSA-4rgh-jx4f-qfcq

Pub/http

http before 0.13.3 vulnerable to header injection

24 May 2022

Fix available
Severity - 6.1 (Medium)