Open
Description
Describe the bug
The com.google.android.play:core:1.7.0, which is used within the dependency, is vulnerable, and Google recommends updating the Play Core Library to the latest version (1.7.2 or above)
To Reproduce
- Upload the APK to Google Play Store
- Within the Messages, you will get a warning like "Your latest production release contains SDK issues"
Critical issues have been reported with the following SDK versions: com.google.android.play:core:1.7.0 What the SDK developer told us: Your app contains a vulnerability that can lead to an attacker writing data to your app's internal storage. This is because your app is using an old version of the Play Core Library. Update the Play Core Library in your app to the latest version (1.7.2 or above).
Screenshots
Metadata
Metadata
Assignees
Labels
No labels