CVE-2021-22567 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Yes
Type	Content spoofing
Description	A security issue has been found in the Dart Core SDK before version 2.15.0. Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors and code-review tools. Exploiting this an attacker could embed source that is invisible to a code reviewer but that modifies the behavior of a program in unexpected ways. This vulnerability impacts all projects that allow Dart source contributions.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2618	dart	2.14.4-1	2.16.1-1	Medium	Fixed

References
https://github.com/dart-lang/sdk/security/advisories/GHSA-8pcp-6qc9-rqmv https://github.com/dart-lang/sdk/issues/47611 https://github.com/dart-lang/sdk/commit/b403d4bf73542b974fb85bfbe58c7e2136b8318d