<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: flutter</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-27704: The Dart and Flutter SDKs provide software development kits for the Dart programming language</title><link>https://patchthecve.com/cve/CVE-2026-27704.html</link><guid>https://patchthecve.com/cve/CVE-2026-27704.html</guid><pubDate>Wed, 17 Jun 2026 10:27:32 +0000</pubDate><description>HIGH 7.5: The Dart and Flutter SDKs provide software development kits for the Dart programming language. In versions of the Dart SDK prior to 3.11.0 and the Flutter SDK prior to version 3.41.0, when the pub client (`dart pub` and `flutter pub`) extracts a package in the pub cache, a malicious package archive </description></item><item><title>CVE-2024-54462: The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to mali</title><link>https://patchthecve.com/cve/CVE-2024-54462.html</link><guid>https://patchthecve.com/cve/CVE-2024-54462.html</guid><pubDate>Wed, 17 Jun 2026 08:10:23 +0000</pubDate><description>HIGH 7.1: The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provider while using your app and could potent</description></item><item><title>CVE-2024-54461: The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to mal</title><link>https://patchthecve.com/cve/CVE-2024-54461.html</link><guid>https://patchthecve.com/cve/CVE-2024-54461.html</guid><pubDate>Wed, 17 Jun 2026 08:10:23 +0000</pubDate><description>HIGH 7.1: The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that provider while using your app and could pot</description></item></channel></rss>