VYPR

file_picker

by Flutter

CVEs (1)

  • CVE-2026-38093Aug 28, 2026
    risk 0.00cvss epss

    file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22) in its Android implementation. The openFileStream() method in FileUtils.kt uses the DISPLAY_NAME obtained from ContentResolver.query() directly in file path…