(The message from MobSF is misleading; it’s looking
for whether the stack is marked as non-executable,
not the shared object.)

In older versions of Dart and Flutter there was a bug
where the ELF generator didn’t emit the gnustack
segment with the ~X permission, but this is now fixed.

Reporting real concerns

While automated vulnerability scanning tools report
false positives such as the examples above,
we can’t rule out that there are real issues that
deserve closer attention.
Should you find an issue that you believe is a
legitimate security vulnerability, we would greatly
appreciate if you would report it:

Flutter security policy

Dart security policy