CVE-2023-22963: Personnummer

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.

Affected products

• Personnummer Personnummer: before 3.0.3 (fixed in 3.0.3)

Published 2023-01-11. Last modified 2026-06-17.