Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
>=5.0	✅
< 5.0	❌

Reporting a Vulnerability

Contact cfug-team@googlegroups.com with your vulnerability report.

Cross-origin redirect leaks sensitive request headers in `dio_http2_adapter`
GHSA-cr65-55v9-xhvv published Aug 15, 2026 by AlexV525
High
CRLF injection with HTTP method string
GHSA-9324-jv53-9cc8 published Mar 21, 2023 by AlexV525
High

Learn more about advisories related to cfug/dio in the GitHub Advisory Database