pubnet vulnerabilities

CVEs whose affected-version data names the pubnet package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-65112Critical· 9.4

10mo ago

PubNet is a self-hosted Dart & Flutter package service

PubNet is a self-hosted Dart & Flutter package service. Prior to version 1.1.3, the /api/storage/upload endpoint in PubNet allows unauthenticated users to upload packages as any user by providing arbitrary author-id values. This enables …

▾ Midnightricardoboss · pubnetEPSS 0.48%via NVD