Related Vulnerabilities: CVE-2021-22567  

A security issue has been found in the Dart Core SDK before version 2.15.0. Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors and code-review tools. Exploiting this an attacker could embed source that is invisible to a code reviewer but that modifies the behavior of a program in unexpected ways. This vulnerability impacts all projects that allow Dart source contributions.

Severity Medium

Remote Yes

Type Content spoofing

Description

A security issue has been found in the Dart Core SDK before version 2.15.0. Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors and code-review tools. Exploiting this an attacker could embed source that is invisible to a code reviewer but that modifies the behavior of a program in unexpected ways. This vulnerability impacts all projects that allow Dart source contributions.

AVG-2618 dart 2.14.4-1 Medium Vulnerable

https://github.com/dart-lang/sdk/security/advisories/GHSA-8pcp-6qc9-rqmv
https://github.com/dart-lang/sdk/issues/47611
https://github.com/dart-lang/sdk/commit/b403d4bf73542b974fb85bfbe58c7e2136b8318d