Flank / flank

:speedboat: Massively parallel Android and iOS test runner for Firebase Test Lab
https://firebase.community/
Apache License 2.0
672 stars 113 forks source link

Outdated Google API Client library leads to vulnerabilities #2372

Closed inktomi closed 1 year ago

inktomi commented 1 year ago

Describe the bug Version 1.35.2 of the Google API Client is vulnerable to the following CVEs due to dependencies it uses:

The latest version (2.2.0) is not vulnerable.

To Reproduce

Include flank in a build that checks for CVE issues in dependencies. See a failure do to the above CVEs.

Expected behavior Flank does not introduce security vulnerabilities in projects that use it.

Details

Refer to Versions.kt to see that Flank is using an outdated version of GOOGLE_API.