From 99977da400c22293cf94dd39f58efb89e3592562 Mon Sep 17 00:00:00 2001 From: Ajin Abraham Date: Wed, 3 Apr 2024 21:50:07 -0700 Subject: [PATCH] Update SECURITY.md --- .github/SECURITY.md | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/SECURITY.md b/.github/SECURITY.md index d0d0869e..0c99bb9f 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -18,6 +18,7 @@ Please report all security issues [here](https://github.com/MobSF/Mobile-Securit | Vulnerability | Affected Versions | | ------- | ------------------ | +| [SSRF in firebase database check](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wpff-wm84-x5cx) | `<=3.9.7` | | [SSRF in AppLink check via abusing url redirect](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6) | `<=3.9.6` | | [SSRF in AppLink check via crafted android:host](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wfgj-wrgh-h3r3) | `<=3.9.5`| | [Arbitrary Local file read in APK icon resource](https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/a58f8a8c0aa49e1581d97e19e8e2255ca96cd838) | `>=1.0.4, <=3.9.2` |