https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:56:03.657868+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-22568 CVE-2021-22568 — Dart - Publishing to third-party package repositories may expose pub.dev credentials 2026-10-07T18:56:03.678118+00:00

Affected: Google LLC Dart SDK

When using the dart pub publish command to publish a package to a third-party package server, the request would be authenticated with an oauth2 access_token that is valid for publishing on pub.dev. Using these obtained credentials, an attacker can impersonate the user on pub.dev. We recommend upgrading past https://github.com/dart-lang/sdk/commit/d787e78d21e12ec1ef712d229940b1172aafcdf8 or beyond version 2.15.0