CVE-2021-22567: Dart Software Development Kit

Low severity, CVSS 3.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Bidirectional Unicode text can be interpreted and compiled differently than how it appears in editors which can be exploited to get nefarious code passed a code review by appearing benign. An attacker could embed a source that is invisible to a code reviewer that modifies the behavior of a program in unexpected ways.

Affected products

• Dart Dart Software Development Kit: before 2.15.0 (fixed in 2.15.0)

Published 2022-01-05. Last modified 2026-06-17.