PatchTheCVEdio vulnerabilities and fixes
Recent CVEs affecting dio, with upgrade or downgrade steps. 1 tracked.
dio has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-04-15. Highest priority: CVE-2021-31402 (score 53/100).
- CVE-2021-31402 HIGH 7.5 UPGRADE The dio package 4.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a differ
FAQ
How do I fix dio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dio being exploited right now?
None of the tracked dio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dio CVE should I patch first?
CVE-2021-31402 currently ranks highest (53/100): The dio package 4.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a differ.