FlutterFlow / flutterflow-ui

BSD 3-Clause "New" or "Revised" License
151 stars 62 forks source link

Google Fonts old version uses unsafe http package under the hood #17

Open gawi151 opened 4 months ago

gawi151 commented 4 months ago

Currently, flutterflow-ui uses google_fonts: 4.0.3 which uses package http: 0.13.0. http: 0.13.0 has known security vulnerability - https://osv.dev/vulnerability/GHSA-4rgh-jx4f-qfcq.

It would be really nice if you could upgrade GoogleFonts package at least to 4.0.5 where http package was bumped to version ^1.0.0 (https://github.com/material-foundation/flutter-packages/commit/2439bdfc725586e7e6660b734e8195c48d134da9)