Skip to content
Threat Feed
Subscribe

Tag

Dart

1 brief RSS
high advisory

Sensitive Header Leak in dio_http2_adapter via Cross-Origin Redirects

The dio_http2_adapter library fails to sanitize Authorization, Cookie, and Proxy-Authorization headers when following cross-origin HTTP redirects, enabling credential theft.

dio_http2_adapter information-disclosure credential-access dart flutter
1t