GHSA-9f2c-xxfm-32mj
Duplicate of GHSA-4xh4-v2pq-jvhm
- Severity
- Low
- The publisher's own rating, not a CVSS score
- Exploit chance (EPSS)
- —
- No score published
- Known exploited
- No
- Not in CISA's catalog
- Weakness
- —
- Not classified
- Fix
3.0.3- Upgrade personnummer to this version or later
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-4xh4-v2pq-jvhm. This link is maintained to preserve external references.
Original Description
The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.
Affected versions
Pub
| Package | Vulnerable | Fixed in |
|---|---|---|
| personnummer | < 3.0.3 |
3.0.3 |
How to fix
Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.
personnummer Pub → 3.0.3
- dart
dart pub add personnummer:^3.0.3
References
Advisories
Other links
Timeline
- Published
- Withdrawn
- Last updated by the source
Related advisories
| Advisory | Severity | Why it's related |
|---|---|---|
| GHSA-4xh4-v2pq-jvhm personnummer/dart vulnerable to Improper Input Validation | Low | Also affects personnummer |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor