CVE-2026-103030

Name of the Vulnerable Software and Affected Versions Dio versions 1.0.0 through 2.7.9

Description The dio http2 adapter follows redirects in the Http2Adapter. fetch() function by copying the original RequestOptions.headers into the redirected HTTP/2 request without verifying if the source and destination origins are the same. This allows a server to return a cross-origin Location redirect to a different destination, which then receives sensitive headers such as Authorization, Cookie, and Proxy-Authorization because RequestOptions.copyWith retains the entire header map. This occurs when applications use Http2Adapter for authenticated requests with redirect following enabled.

Recommendations Update to version 2.8.0.