search

bytedance / AabResGuard

The tool of obfuscated aab resources.(Android app bundle资源混淆工具)
Apache License 2.0
1.3k stars 179 forks source link

There is a vulnerability in guava:27.0.1-jre,upgrade recommended #65

Open QiAnXinCodeSafe opened 2 years ago

QiAnXinCodeSafe commented 2 years ago

https://github.com/bytedance/AabResGuard/blob/e8f3a5d361ce61a3d4fa8bafb9d030bbe459c400/core/build.gradle#L38

CVE-2020-8908

Recommended upgrade version：30.0-jre

martinloren commented 2 years ago

Fix in pull request...