-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability centers around improper input validation of Swedish personal identity numbers. While no direct patch diffs are provided, multiple advisories explicitly state the root cause was a regex that allowed invalid last-four-digit patterns (^000[0-9]$). The primary validation function Personnummer.validate would be responsible for executing this regex check. In Dart implementations, this would typically be a static validation method in the Personnummer class. The function signature matches the entry point for number validation and would appear in stack traces when processing malicious inputs.
DartDart| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| personnummer | pub | < 3.0.3 | 3.0.3 |
Ongoing coverage of React2Shell