Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS05ZjJjLXh4Zm0tMzJtas4AAw5d
Duplicate of GHSA-4xh4-v2pq-jvhm
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-4xh4-v2pq-jvhm. This link is maintained to preserve external references.
Original Description
The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.
Permalink: https://github.com/advisories/GHSA-9f2c-xxfm-32mjJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05ZjJjLXh4Zm0tMzJtas4AAw5d
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Low
Classification: General
Published: over 1 year ago
Updated: about 1 year ago Widthdrawn: over 1 year ago
Identifiers: GHSA-9f2c-xxfm-32mj
References:
- https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm
- https://nvd.nist.gov/vuln/detail/CVE-2023-22963
- https://github.com/advisories/GHSA-4xh4-v2pq-jvhm
- https://github.com/advisories/GHSA-9f2c-xxfm-32mj
Blast Radius: 0.0
Affected Packages
pub:personnummer
Dependent packages: 2Dependent repositories: 1
Downloads:
Affected Version Ranges: < 3.0.3
Fixed in: 3.0.3
All affected versions: 1.0.0, 1.0.1, 1.0.2, 2.0.0, 2.1.0, 3.0.0, 3.0.1, 3.0.2
All unaffected versions: 3.0.3, 3.0.4, 3.0.5, 3.1.0