# ThreadEast social kit — 2026-10-28 Drafts for human review; no posts have been sent. Edition: 1; source-reviewed. ## X thread ### Post 1 (113/280) Flutter Security Brief: Upgrade 3.47.8, Then Rebuild the App 1 source-linked reading notes from China’s internet. ### Post 2 (280/280) 1. Flutter 3.47.8 addresses a TLS trust problem in affected dart:io paths Read the Juejin item as a developer summary, then use the Dart SDK advisory as the authority for scope and remediation. The advisory describes compromised eMudhra intermediate CA certificates, affected dar… ### Post 3 (75/280) Sources and full reading guides: https://threadeast.xyz/briefing/2026-10-28 ## Bluesky thread ### Post 1 (104/300) Flutter Security Brief: Upgrade 3.47.8, Then Rebuild the App English reading guides and names explained. ### Post 2 (300/300) 1. Flutter 3.47.8 addresses a TLS trust problem in affected dart:io paths Read the Juejin item as a developer summary, then use the Dart SDK advisory as the authority for scope and remediation. The advisory describes compromised eMudhra intermediate CA certificates, affected dart:io verification pa… ### Post 3 (78/300) Original sources and reading notes: https://threadeast.xyz/briefing/2026-10-28 ## Reddit native text Title: Flutter Security Brief: Upgrade 3.47.8, Then Rebuild the App (2026-10-28) Source-checked reading notes for 2026-10-28. 1. Flutter 3.47.8 addresses a TLS trust problem in affected dart:io paths The official advisory identifies Flutter versions before 3.47.8 and Dart versions before 3.13.7 as affected in the described Android, Windows and unpatched or containerized Linux TLS contexts. It requires an SDK upgrade followed by rebuilding and redeploying the affected binaries. Reading guide: Read the Juejin item as a developer summary, then use the Dart SDK advisory as the authority for scope and remediation. The advisory describes compromised eMudhra intermediate CA certificates, affected dart:io verification paths and fixes in Flutter 3.47.8 and Dart 3.13.7. It also says Web, iOS and macOS are not affected by this specific issue. ThreadEast did not reproduce the exploit, inspect a production app or measure adoption. The October 28 observation and editorial review are not a new disclosure. Recorded at #8 on Juejin via UAPI. Original source: https://juejin.cn/post/7700380674944204810 Rankings and selected sources do not establish a nationwide view. These notes make no claim about public sentiment. Sources and full reading guides: https://threadeast.xyz/briefing/2026-10-28 Check community rules and relevance before selecting a subreddit. ## Substack Note China internet notes · 2026-10-28 1. Flutter 3.47.8 addresses a TLS trust problem in affected dart:io paths The official advisory identifies Flutter versions before 3.47.8 and Dart versions before 3.13.7 as affected in the described Android, Windows and unpatched or containerized Linux TLS contexts. It requires an SDK upgrade followed by rebuilding and redeploying the affected binaries. Reading guide: Read the Juejin item as a developer summary, then use the Dart SDK advisory as the authority for scope and remediation. The advisory describes compromised eMudhra intermediate CA certificates, affected dart:io verification paths and fixes in Flutter 3.47.8 and Dart 3.13.7. It also says Web, iOS and macOS are not affected by this specific issue. ThreadEast did not reproduce the exploit, inspect a production app or measure adoption. The October 28 observation and editorial review are not a new disclosure. Recorded at #8 on Juejin via UAPI. Ranking positions are observations, not independently verified claims or a representative sentiment survey. Read the source-linked edition: https://threadeast.xyz/briefing/2026-10-28 ## Source checks - Juejin via UAPI: https://juejin.cn/post/7700380674944204810 (observed 2026-10-27T17:35:12.736Z) ## Daily 60-minute workflow - 0–15 min: check freshness, verify names, dates and figures; review the edition and one hook. - 15–35 min: adapt the source-backed note to a relevant community and follow its rules. - 35–60 min: read relevant Notes and Bluesky discussions; contribute only with direct authorization. - Record the published URL, campaign, date and results in the publication ledger. - Never invent comments, public reactions or a reason for a trend.