Flutter urgently releases security update 3.47.8 and recommends that everyone upgrade
The reader’s brief
Read the Juejin item as a developer summary, then use the Dart SDK advisory as the authority for scope and remediation. The advisory describes compromised eMudhra intermediate CA certificates, affected dart:io verification paths and fixes in Flutter 3.47.8 and Dart 3.13.7. It also says Web, iOS and macOS are not affected by this specific issue. ThreadEast did not reproduce the exploit, inspect a production app or measure adoption. The October 28 observation and editorial review are not a new disclosure.
The official advisory identifies Flutter versions before 3.47.8 and Dart versions before 3.13.7 as affected in the described Android, Windows and unpatched or containerized Linux TLS contexts. It requires an SDK upgrade followed by rebuilding and redeploying the affected binaries.
Read original on Juejin via UAPI ↗ · Daily record · Monthly report