Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-22540
6.1
MEDIUMCVSS v3
Severity scale
010
Description
Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for creating DOM nodes from text did not sanitize properly when it came across template tags.
dart-lang/sdk
GitHubThe Dart SDK, including the VM, JS and Wasm compilers, analysis, core libraries, and more.
GitHubThe Dart SDK, including the VM, JS and Wasm compilers, analysis, core libraries, and more.NVD