GHSA-9f2c-xxfm-32mj: Duplicate of GHSA-4xh4-v2pq-jvhm
N/A
CVSS Score
Basic Information
CVE ID
-
GHSA ID
EPSS Score
-
CWE
-
Published
1/11/2023
Updated
1/27/2023
KEV Status
No
Technology
Dart
Technical Details
CVSS Vector
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| personnummer | pub | < 3.0.3 | 3.0.3 |
Vulnerability Intelligence
Miggo AI
Root Cause Analysis
The vulnerability centers around improper input validation of Swedish personal identity numbers. While no direct patch diffs are provided, multiple advisories explicitly state the root cause was a regex that allowed invalid last-four-digit patterns (^000[0-9]$). The primary validation function Personnummer.validate would be responsible for executing this regex check. In Dart implementations, this would typically be a static validation method in the Personnummer class. The function signature matches the entry point for number validation and would appear in stack traces when processing malicious inputs.