[SECURITY][HOTFIX] Fixes GHSA-4hh3-vj32-gr6j (#2421)

* Fixes GHSA-4hh3-vj32-gr6j
* update SECURITY.md
* update dependencies
This commit is contained in:
Ajin Abraham
2024-08-18 02:07:14 -07:00
committed by GitHub
parent 5b7c5c0075
commit cc625fe843
5 changed files with 397 additions and 363 deletions
+1
View File
@@ -18,6 +18,7 @@ Please report all security issues [here](https://github.com/MobSF/Mobile-Securit
| Vulnerability | Affected Versions |
| ------- | ------------------ |
| [Zip Slip Vulnerability in .a extraction](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-4hh3-vj32-gr6j) | `<=4.0.6` |
| [Open Redirect in Login redirect](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8m9j-2f32-2vx4) | `<=4.0.4` |
| [SSRF in firebase database check](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wpff-wm84-x5cx) | `<=3.9.7` |
| [SSRF in AppLink check via abusing url redirect](https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-m435-9v6r-v5f6) | `<=3.9.6` |