CVE-2023-22963

Description

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.

Affected Platforms

Weakness Type

CWE-20, CWE-20

References

• https://github.com/advisories/GHSA-4xh4-v2pq-jvhm
• https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm
• https://github.com/advisories/GHSA-4xh4-v2pq-jvhm
• https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm