Assigned
Status Update
No update yet.
Comments
rm...@google.com
Thanks for the report. I will route this to the appropriate internal team and update this when I hear back from them.
sa...@google.com
sa...@google.com
One more detail, Data Layer event calls from the watch to the phone (running Android 13) do work on if the listener is in an Activity or Fragment.
Description
What you would like to accomplish:
Outdated libraries have been flagged for vulnerabilities. However, the vulnerable URL field is inconsistently populated – sometimes empty, and sometimes showing the URL in subsequent scans of the same library (jquery 1.7.1 as an example)
How this might work:
While the scanner may not determine all instances of a vulnerable library, the 'Vulnerable URL' field should still suggest a potential entry point for investigation, and not an empty field.