-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| dio | pub | < 5.0.0 | 5.0.0 |
DartDartMiggo AIRoot Cause AnalysisThe vulnerability stems from missing validation of the HTTP method string before constructing requests. The patch introduced the _isValidToken validation check in _transformData, which was absent in vulnerable versions. Since _transformData is the entry point for request processing and directly used the unvalidated options.method parameter, its lack of validation made it the vulnerable entry point for CRLF injection.
KEV Misses 88% of Exploited CVEs- Get the report