https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:06:18.617125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-01568 cnvd-2021-01568 2026-10-05T15:06:18.620442+00:00 cnvd-2021-01568 https://cve.radiocsirt.org/vuln/euvd-2026-47693 EUVD-2026-47693 2026-10-05T15:06:18.620475+00:00 EUVD-2026-47693 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35669 fkie_cve-2020-35669 2026-10-05T15:06:18.620489+00:00

An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to achieve CRLF injection in an HTTP request.

 https://cve.radiocsirt.org/vuln/ghsa-4rgh-jx4f-qfcq GHSA-4rgh-jx4f-qfcq — http before 0.13.3 vulnerable to header injection 2026-10-05T15:06:18.620518+00:00

Affected: Pub: http

An issue was discovered in the http package before 0.13.3 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to achieve CRLF injection in an HTTP request via HTTP header injection. This issue has been addressed in commit abb2bb182 by validating request methods.

 https://cve.radiocsirt.org/vuln/gsd-2020-35669 gsd-2020-35669 2026-10-05T15:06:18.620541+00:00 gsd-2020-35669