[Bug report] Security Vulnerability CVE-2022-2390 in play-services-basement #747

Activity

1. jackqdyulei commented on Oct 23, 2023

   

   jackqdyulei

   on Oct 23, 2023

   Collaborator

   More actions

   Hi DanielKispert, thanks for your report and this is definitely something we should fix.

   To unblock you I wonder whether you can first depend on higher version of play-services-basement in your build.gradle. In this way your app should auto-resolve to new play-services-basement to fix the security issue.

   Once we release new SDK, I will update this thread so you can remove your direct dependency
2. jackqdyulei

   self-assigned this

   on Nov 20, 2023
3. ai-plays commented on Feb 20, 2024

   

   ai-plays

   on Feb 20, 2024

   Collaborator

   More actions

   This is fixed https://developers.google.com/ml-kit/release-notes#improvements
4. ai-plays

   closed this as completedon Feb 20, 2024