Security#

The Dart team takes the security of pub.dev seriously.This page describes how to report any vulnerabilities you may find.

Reporting vulnerabilities#

In the rare event that you find a vulnerability in pub.dev, contact us athttps://goo.gl/vulnz.

For more information about how Google handles security issues, seeGoogle’s security philosophy.

Security advisories for packages#

In case of a vulnerability regarding a specific package, use GitHub’ssecurityadvisoryfeature to create a new security advisory. GitHub will review and ingest theadvisory into the centralGitHub Advisorydatabase where you can also go search forvulnerabilities in the Pub ecosystem.

For more information about pub and security advisories checkout out thedocs.