{ "capsule": { "schema": "apk-scanner.proof/v2", "issuer": "apk-scanner.com", "issued_at": "2026-10-13T16:31:52.968Z", "app": { "app_id": "com.frontrow.vlog", "title": "VN: Photo & Video Editor", "version": "2.22.1" }, "analysis": { "issues": [], "stages": { "pii": "complete", "sbom": "complete", "signing": "certificate_parsed", "strings": "complete", "manifest": "complete" }, "status": "complete", "grading": { "policy": "static-coverage-v1", "blockers": [], "eligible": true }, "timings_ms": { "total": 56153.456, "harvest": 25911.19599999994, "detectors": 24748.47400000032 }, "bytes_total": 411457367, "bytes_scanned": 411457367, "bytes_skipped": 0, "files_processed": 7715, "coverage_version": 2, "string_encodings": [ "ascii", "utf16le" ], "signature_validation": "not_performed" }, "provenance": { "mode": "static", "artifacts": [ { "name": "base.apk", "sha256": "2cb8478d63bacc6fb2859cb93ffff1ac387a74cc341192d56f4163cb60692fe9" }, { "name": "config.arm64_v8a.apk", "sha256": "313912edfa0282679fc5123014c19eea61257cca4b52ee81afb3fd5abda73169" }, { "name": "config.en.apk", "sha256": "d7952e4cc2ca3193a6828de94da254b86348284fe6f7a263f25f69f76be603d2" }, { "name": "config.xxhdpi.apk", "sha256": "587ed886d91a35e539d206b2e3d5f88dab45fd68f2751eb174a9da8e9dc20941" }, { "name": "vn_install_time_audio_effects.apk", "sha256": "48376c93a025f6914cf658ef8c5d891762bc02c0c09537a9a17ed5c6c05237e9" }, { "name": "vn_install_time_fx.apk", "sha256": "2e7fc03adf7e81714db0dde494c9d5516d2869bd93cb016aeabd6cd2e1b4291e" }, { "name": "vn_install_time_help_video.apk", "sha256": "4787baacf3062a7f1ad3637502254b7b2589924c57a2ed1a6d86ab74cc640a8d" } ], "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e" }, "apk_sha256": "2cb8478d63bacc6fb2859cb93ffff1ac387a74cc341192d56f4163cb60692fe9", "scan": { "scan_id": "9c92da84-711f-41c4-ac50-49eb3408fd61", "scanned_at": "2026-10-12T18:43:50.273Z", "grade": "A", "score": 90 }, "apk_signer": { "scheme": "v3", "subject_o": "Ubiquiti Networks", "subject_cn": "Glorin Li", "sha256": "54f8d547c71f25afcd0917289155f7d2dd9d767f5de148c0c07c4e19e34be61f", "not_after": "2043-03-10T05:45:36+00:00" }, "counts": { "critical": 0, "high": 0, "medium": 1, "low": 109 }, "findings": [ { "finding_type": 2, "severity": "low", "title": "Firebase Realtime Database reference", "redacted_display": "https://█████████████████████.firebaseio.com/███", "fingerprint": "6810851975edf4690731d5be5a9f520a7df7990c36f533118a28a174a7c819a4", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 20, "severity": "low", "title": "Google API key (client-shipped; restriction unverified)", "redacted_display": "AIza•••••••• (21–40 chars, redacted)", "fingerprint": "3a50b84ebda8f8a34995cbb33a3c46bf8b024205707f82a9eae263f1c3b3c0bb", "verified": false, "cwe": [ "CWE-798" ], "masvs": [ "MASVS-STORAGE-1" ], "remediation": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control." }, { "finding_type": 53, "severity": "low", "title": "Firebase Storage bucket reference", "redacted_display": "████████████", "fingerprint": "aee3a5e361821d28cac0cf91d6e4b16a4c895d65a39b7bd09a02cb71e2991b13", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 53, "severity": "low", "title": "Firebase Storage bucket reference", "redacted_display": "████████████", "fingerprint": "6da605c01a32d6178ae1e6876876e3de02277efaeb0bf30b781056b6efdcc7a8", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 53, "severity": "low", "title": "Firebase Storage bucket reference", "redacted_display": "████████████", "fingerprint": "b6e2cb8eb4bf3d0a7bcb1c02e7aaa6b80181f3fefcd2655ab608c7c76f9d6977", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "2a1630eccc11898c1be39c34ed3de91678ec97effc64419c33dee0241d718b94", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "3ff17d184c796ebf2671ca29584a1de0a8eeded0b5fa42f2a9b9c9558f831a4d", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "eae762f55edd3510a245ddb3bb9126f39155dc8a0e0ab985465fe371ab0d7a1a", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8f7b3750cde16577b3d1762eda74fa95cb1e52d2dfa529179153151742389a20", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "5a9fbc0d86d6eac82943869773c10b3e358307131ad08e13dc241d90f9928f66", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8586a909190117f85f39047d489ac9b1eebe183ed775d702ab81e7abb4329ba7", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8a2fd0cd7667acec8e042e9c6439c4e885956348e84e667f891e8bc4ea6da2c8", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "f1650adaece28cf3bffe0efa33b1312de8603e8bdac4bdf744cd1048127300cc", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "78275ae29bc79723ebcca476f9b95c33d6c72069e7be2029ef25dac84559c177", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "7df2ee92373410774f38125c18b62118d5c3f8799dee75e13fab509eb196c23e", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c5d4decfdf0933d0c419db651d4db6c254727c7091b38520c2c9c5fa2b519318", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "eef0ce3d791065fb9460df4fd663dc4be459922aa5c659d1e4833c16eea0a53b", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "952ef5ffccf70e0016a758c86aebdfdb757cbd7066cb4ffd0eec3c8f36110264", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "a5c61f63e0ad559f6948a59319e94aba67e7dea0ffc186df52986471bc95f0b9", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "2dce2f61a5a4adf89ee04a072db2f12894f5b5803496ca75a712c5c81f410b5d", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "da54c16f4ebc3d63a226b9fdc98b34f5495101062e3081626ce3fbe5f8e61f92", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "cff4950a8bf3d0477d337e1103332acacf31ae29c008fccfd38b0a4a2ec1c067", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "06d8bc0a108d324292944d2d437f53a8b4511565ed71395df488214f389d1f65", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "4cd2febb84cee96a196773b932c2ef3746beca5b44c85999b3292b9f89bf2037", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "591066b152e20acdc4a0eb30bce8053d304207b1bb9062dd29e08711c5a01db6", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "898ec7318003479605278e1be36e5edd012ac382a47e47f0b30d1c51759d3ea1", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "cc57cc00224bb2efe764a94eeafaad275d2256ff0b2fd59589a183b4d8e9bf58", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "d364f5f5cb48ec86b1a19ba8e808e2ce6a1143abf948b221ceebb745ce5a40d3", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "203657a0bd318de7a3e51b3a98ea0581d72a26ee4e5187cefdaa7458b3591194", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "1951e46c6b79f3d34cae6b447648fbbbcf4ac78488db5b02fffe041c06db7d45", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "47f3824cef2f71609c6b7d7a258ddf59ab19f1ec58dcf54f90a5cba9dc3bf2a3", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "e023414c8216ba738220f5b8c9aae58bce78753e93f0bdd9218c67f53a48aca1", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "1dabdd9b25b4501d9b77bb602e8faad158cdda7c9d153031b62cd703d2893671", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "fb55d8866b57ac6a30cc629465762519e337d86db92707b491276d9909677a97", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "359ee5d95cbfafafef3c8f1a00649c2bd43253f5ca88e4ee150b788ae9abd642", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "1b695377508b0070233d42c5da3e61399c3a7154959ef71d3272a09c91ca4404", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "bd5097eb4c6b229177566186c96dd5fdc3bac0815b93594418621625e7af07a9", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c180d653fedee6fdba5f6ebc2835e73c41268cbd1d6b4d2fdfd89b18f2a53989", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "890b5eeb1fdb3b4e2e2173b85c2edbacaace9dd23bf8dfa536b57295d2c8c78e", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "fe60285cefc10fed3d0f3a787a514388e0bc78cf4b116e27a5f8cef2da6b87be", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "9ad9f393798064aa15facde19cac5f645572873c5dfa03fad51674c57600a3f5", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "f3e4e7bbfa0cc3e4cfabe06db040e12720c8554617ca054c1ccda58a175cb3b9", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "1595eced967fadc3bb6e988784b70dca2b8d6bb3a88cd34e63a2f39772ad16fc", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c5481795cd3f757ab71dd182694f5fd9053e6e6a442c3f8282288cc499135c57", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "18a190ac4016d70e86a1b2e8102ef2af19309f905a5c8b877157877297db1ea6", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "b7adc5db9108e413ced9d59b0d7aa514ff106f7a01682bd7ea3889cf59bae719", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "46c61d5d5ff120b999cc51ff2c76205daa29b123ce257437dea31c870ed873a5", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "4d8e4900d67e948ec5ee62aa09a17bc78e9c4493c4c252c4b33d057f98649f30", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "59d17113291b098b542198cd800b6a1040d07e6cd6c872310759e2bf1b3bc35d", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "641f98c989280de28d16969680011bec8ebef73f6065b1c2303ab76b277b0a20", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "5ed7518e20fdb62489e9fac2598edc5e9e7772907233d08d613403958524469c", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "495e55ea7150fce1b9c595ecfb5f314bd9836765e46712b42f3ddee4fbdd4dc1", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "3f2b8a8d462054aaf6c4dea46fb431392239124d08e7cff8e4a6ed0b12c10e40", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "6150527dda3bb7b3376f6ca523541461cea5a4932e5de26e08e0fd46f2e879ba", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "003ab290126f29fac532ef8c3aeeb4949b5c20c530566f80b5f104b2275f3054", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "d4c403681ad2db329d175116a64933042ed20829e9f163c3bcd31162e59a8f0d", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c98d1623e8b2440aab652d33bd9c0b87f55ccb80a9a4d7614e9a1fe8082ce600", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c9945e293065d1d4bba50a6adc18df018c880377a63edd9cf072e8061d326d26", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "6ccbf3abca599f3bc8e44adb8beb7a44eb1958a081c54f84f6683f57d60a3b45", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "150bf6434c8947a55611889146f2da9be47f20a3f48a2e904cf50174ee497b94", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "f646f0ef36424dd2c9e2967bf0f8a455b9756a4e224a48f11ad508bd9472f31f", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "d53a8c9526f99d90ce16fd77361e014154a7adb739649f5b341440612754c1dd", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c643cae0d57ce8fa79aecc1ef70d887b2f5cb05e7dc6853571a84db331b92cb9", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "862257352ec885dd92a1ef59c1ccbc83c4053a962ca0733e8114bc8e08d2fd4b", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "5e02c98d10915be8c69f5d7107fea5d79ce494eb70582b27fe76ce2a4fade4ca", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "e1d47f01d410d72f932cf03f22d4a487ab6f1fe943a8f96254be09c5e91c7e17", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "7f607509ed111d3146c576199b0e6c67e30daf50329f000a750364f677b0934c", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "396784bd8ff04badd366b6393ab10bffd4fbbdcf9c4773242ff310dbfabf1f1f", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "9ae600a92fd92f52be7579b2c3c6c721dbdba2becb78fd9929eda50038383c63", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "f280a9ed20346d8af514b8f1902ab192af8741a4e6574ab2a0c5f11cf741b391", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "e50a85aec22cb8684712f6439ea221e3ece9f4cd589bad7324f257b6a1123679", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "a99dc88dbfe8a9b728a17acdb4ff7779e0e8ae158757d27456bff0bd70bf7861", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "396f912f6204c0dd1a712d73c8241586f4e34d856b84f9a22b8e2dbe965c8637", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "725819a2e2ff509fa978e2c0ae79a269f618ac4d6e82bf56ea5b205a5f163f40", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "deafc956bf5c5c425aa1cb3eed30c114b0f6778f2648f14e6569a0d5bdd2b7f4", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c72c2dc6baa54109d5d608bcb45843d4f2fcb818f9bc264aff6931301fc17b23", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "90698918d4d5dabafe068abe02180020e9703b8bffe9337be1212739d50dea68", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "d9e3e23123a31b0d683ad1ee4d99a7c17f095dfcef66fb560b46ed968676610f", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "f472e3856d05d2be8c426d3f3161b188a8b979e1c9d0610fc43362da2f260465", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "9558711b8ce7bd8ffeef730fa63b2b79acad07022d6463e432dc8931f0c8093f", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8ef233a1f17d15892aa47bc9ebf6bfc1ed5dad5de6fb721ac20ba341b8c6d6dd", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "a3c8ca5ae592ea5be9a2c2ad178d634526f824d7ee987dff82d34c1dcf62ce3a", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "3bc82aa054d09a173be7ed081e09d2bf27b82d64bc315bb465c90b3808f036c0", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "cf720c741123c2284dc9f5e9308f10290b2b156e2fd4e82a83c1f5e90cd988c3", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "ec61763a9dd87580db3888a0134f26f06f35f9d51bcaf510bff033afd94f99bf", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8f3bd0bc306d31e9d73656c4d98500408e0c7de02e7ef03742abebbe97b9c290", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "217ce097141d4bd02b4e2e814085147c8e3edea2193ea38046e08af53cdfa095", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "1cc65f17670612d56f99accb18f158716637e127d48b520e1ccd63ae564ffdfb", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "818c263a4b8ba0c080994bac12e5bfed1f11711906749ab634a5542c2ab944db", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8af74188926027bda1b402beeb78408c2690678ca5de112ad35aa3cecf01b2ee", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "bfc8de8b4a268d8070091ec235bc11b51854d6719e24722c7d391f76a934a547", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "e767fdd62d8922a9c447668a127e7e8760269701c9e4feb24c470baf8ad4fcf8", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "95b250cccf1e97ec99f0256398b4aa2ab0453d45facd9eb3dcf97f75de01f612", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "0873cfcf38fb2877f82b70a7925dc8bd12ed7aae9d54cb9bd880507ec10ef37d", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "a3aa50690ef2dde80ed5b5aaa0467911eb8de533e8c2fe188ce18f3617aa8319", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "e84eff59c2089d16bc21f72553f8da2f972ff9c163afdcb7f1cbc83eba94d894", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "db39270ce82183742386272a5e8c858ecb0adaee98893c43a45221d245a781b6", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "da21acc9601de07025f0cbb77bdc5bd4d99d945091a1b534293c78d9de3fe29d", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8b6cc6db9b8cb94f620ad0a36f0d86694a17f2af0be6154901aee1bdfe8ea1ba", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "26e93b4898ae377188619b45d85098ef56217dec4ad29ce931e28cd16e34d171", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "504e6cd43cfeb962d8af4a77e01d3e73ffd6a295949df2b824405799446b9eef", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "8f31d15a653b709ce39d65b5b1a03319b3208cf38710eb649f4bfe10f1f22cfb", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "23da9956994fff8fb5a727f4ba1cf02b8bebca8e7396012f4cf722ce90465522", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "951babae1a3155d8416f64e5ad74964f1327baab61058745b8a635e2e429f441", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "63e53aa156545d4961e85d4480d2874e2d0a05ddfe7f97d3809958e565c5bc31", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "c525133b1ea5b43c6600b09780f6175534baa36af8b25a317ee0d32e7b36e65a", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "9dcf125290a802f8d4fa6837b9365c96761595bdb0753f2caf89871ccb5a4cd1", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "efbaf16cef5d3242a3fab18f690f552f21801d17e7ea05ec5f1e859886c9c551", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 84, "severity": "low", "title": "Alibaba Cloud OSS bucket reference", "redacted_display": "https://████████████.oss-cn-shenzhen.aliyuncs.com/███", "fingerprint": "82820d0d49ade7c41b58c588574917785bcb83c9b34f0dbd35a57d3f6e3c5075", "verified": false, "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ], "remediation": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, { "finding_type": 34, "severity": "medium", "title": "Cleartext (HTTP) traffic permitted", "redacted_display": "android:usesCleartextTraffic=\"true\"", "fingerprint": "94025ca91177232efea2d52d976e37f967866402c6e01f481a8de610b8e478e7", "verified": false, "cwe": [ "CWE-319" ], "masvs": [ "MASVS-NETWORK-1" ], "remediation": "Set android:usesCleartextTraffic=false and/or a networkSecurityConfig that forbids cleartext; serve all endpoints over HTTPS." } ], "live_verification": { "verified_count": 0, "items": [] }, "trackers_count": 7, "pii": { "sources": 8, "identifiers": [ "Advertising ID (AAID)", "Android ID", "Device ID / IMEI" ], "destinations": 5 }, "sbom": { "component_count": 132, "vuln_count": 0, "components": [ { "name": "androidx.activity:activity", "version": "1.13.0", "cves": [] }, { "name": "androidx.activity:activity-compose", "version": "1.13.0", "cves": [] }, { "name": "androidx.activity:activity-ktx", "version": "1.13.0", "cves": [] }, { "name": "androidx.annotation:annotation-experimental", "version": "1.5.0", "cves": [] }, { "name": "androidx.appcompat:appcompat", "version": "1.7.1", "cves": [] }, { "name": "androidx.appcompat:appcompat-resources", "version": "1.7.1", "cves": [] }, { "name": "androidx.asynclayoutinflater:asynclayoutinflater", "version": "1.0.0", "cves": [] }, { "name": "androidx.autofill:autofill", "version": "1.0.0", "cves": [] }, { "name": "androidx.browser:browser", "version": "1.10.0", "cves": [] }, { "name": "androidx.camera.featurecombinationquery:featurecombinationquery", "version": "1.5.3", "cves": [] }, { "name": "androidx.camera:camera-camera2", "version": "1.5.3", "cves": [] }, { "name": "androidx.camera:camera-core", "version": "1.5.3", "cves": [] }, { "name": "androidx.camera:camera-lifecycle", "version": "1.5.3", "cves": [] }, { "name": "androidx.camera:camera-video", "version": "1.5.3", "cves": [] }, { "name": "androidx.camera:camera-view", "version": "1.5.3", "cves": [] }, { "name": "androidx.cardview:cardview", "version": "1.0.0", "cves": [] }, { "name": "androidx.compose.animation:animation", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.animation:animation-core", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.foundation:foundation", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.foundation:foundation-layout", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.material3:material3", "version": "1.4.0", "cves": [] }, { "name": "androidx.compose.material:material-ripple", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.runtime:runtime", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.runtime:runtime-annotation", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.runtime:runtime-retain", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.runtime:runtime-saveable", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui-geometry", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui-graphics", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui-text", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui-tooling-preview", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui-unit", "version": "1.11.2", "cves": [] }, { "name": "androidx.compose.ui:ui-util", "version": "1.11.2", "cves": [] }, { "name": "androidx.constraintlayout:constraintlayout-compose", "version": "1.1.1", "cves": [] }, { "name": "androidx.coordinatorlayout:coordinatorlayout", "version": "1.2.0", "cves": [] }, { "name": "androidx.core:core", "version": "1.18.0", "cves": [] }, { "name": "androidx.core:core-ktx", "version": "1.18.0", "cves": [] }, { "name": "androidx.core:core-performance", "version": "1.0.0", "cves": [] }, { "name": "androidx.core:core-performance-play-services", "version": "1.0.0", "cves": [] }, { "name": "androidx.core:core-viewtree", "version": "1.0.0", "cves": [] }, { "name": "androidx.cursoradapter:cursoradapter", "version": "1.0.0", "cves": [] }, { "name": "androidx.customview:customview", "version": "1.1.0", "cves": [] }, { "name": "androidx.customview:customview-poolingcontainer", "version": "1.0.0", "cves": [] }, { "name": "androidx.databinding:viewbinding", "version": "8.13.2", "cves": [] }, { "name": "androidx.datastore:datastore", "version": "1.1.7", "cves": [] }, { "name": "androidx.datastore:datastore-core", "version": "1.1.7", "cves": [] }, { "name": "androidx.datastore:datastore-preferences", "version": "1.1.7", "cves": [] }, { "name": "androidx.datastore:datastore-preferences-core", "version": "1.1.7", "cves": [] }, { "name": "androidx.documentfile:documentfile", "version": "1.0.0", "cves": [] }, { "name": "androidx.drawerlayout:drawerlayout", "version": "1.1.1", "cves": [] }, { "name": "androidx.dynamicanimation:dynamicanimation", "version": "1.0.0", "cves": [] }, { "name": "androidx.emoji2:emoji2", "version": "1.4.0", "cves": [] }, { "name": "androidx.emoji2:emoji2-views-helper", "version": "1.4.0", "cves": [] }, { "name": "androidx.exifinterface:exifinterface", "version": "1.4.2", "cves": [] }, { "name": "androidx.fragment:fragment", "version": "1.6.1", "cves": [] }, { "name": "androidx.fragment:fragment-ktx", "version": "1.6.1", "cves": [] }, { "name": "androidx.graphics:graphics-path", "version": "1.0.1", "cves": [] }, { "name": "androidx.heifwriter:heifwriter", "version": "1.0.0", "cves": [] }, { "name": "androidx.interpolator:interpolator", "version": "1.0.0", "cves": [] }, { "name": "androidx.legacy:legacy-support-core-ui", "version": "1.0.0", "cves": [] }, { "name": "androidx.legacy:legacy-support-core-utils", "version": "1.0.0", "cves": [] }, { "name": "androidx.legacy:legacy-support-v4", "version": "1.0.0", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-livedata", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-livedata-core", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-livedata-core-ktx", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-process", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-runtime", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-runtime-compose", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-runtime-ktx", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-service", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-viewmodel", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-viewmodel-compose", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-viewmodel-ktx", "version": "2.9.4", "cves": [] }, { "name": "androidx.lifecycle:lifecycle-viewmodel-savedstate", "version": "2.9.4", "cves": [] }, { "name": "androidx.loader:loader", "version": "1.1.0", "cves": [] }, { "name": "androidx.localbroadcastmanager:localbroadcastmanager", "version": "1.0.0", "cves": [] }, { "name": "androidx.media:media", "version": "1.0.0", "cves": [] }, { "name": "androidx.navigation:navigation-common", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-common-ktx", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-compose", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-fragment", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-fragment-ktx", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-runtime", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-runtime-ktx", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-ui", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigation:navigation-ui-ktx", "version": "2.5.3", "cves": [] }, { "name": "androidx.navigationevent:navigationevent", "version": "1.0.0", "cves": [] }, { "name": "androidx.navigationevent:navigationevent-compose", "version": "1.0.0", "cves": [] }, { "name": "androidx.palette:palette", "version": "1.0.0", "cves": [] }, { "name": "androidx.palette:palette-ktx", "version": "1.0.0", "cves": [] }, { "name": "androidx.preference:preference", "version": "1.2.1", "cves": [] }, { "name": "androidx.preference:preference-ktx", "version": "1.2.1", "cves": [] }, { "name": "androidx.print:print", "version": "1.0.0", "cves": [] }, { "name": "androidx.privacysandbox.ads:ads-adservices", "version": "1.1.0-beta11", "cves": [] }, { "name": "androidx.privacysandbox.ads:ads-adservices-java", "version": "1.1.0-beta11", "cves": [] }, { "name": "androidx.profileinstaller:profileinstaller", "version": "1.4.0", "cves": [] }, { "name": "androidx.recyclerview:recyclerview", "version": "1.3.2", "cves": [] }, { "name": "androidx.room:room-ktx", "version": "2.8.4", "cves": [] }, { "name": "androidx.room:room-runtime", "version": "2.8.4", "cves": [] }, { "name": "androidx.room:room-rxjava2", "version": "2.8.4", "cves": [] }, { "name": "androidx.savedstate:savedstate", "version": "1.3.3", "cves": [] }, { "name": "androidx.savedstate:savedstate-compose", "version": "1.3.3", "cves": [] }, { "name": "androidx.savedstate:savedstate-ktx", "version": "1.3.3", "cves": [] }, { "name": "androidx.slidingpanelayout:slidingpanelayout", "version": "1.2.0", "cves": [] }, { "name": "androidx.sqlite:sqlite", "version": "2.6.2", "cves": [] }, { "name": "androidx.sqlite:sqlite-framework", "version": "2.6.2", "cves": [] }, { "name": "androidx.startup:startup-runtime", "version": "1.1.1", "cves": [] }, { "name": "androidx.swiperefreshlayout:swiperefreshlayout", "version": "1.0.0", "cves": [] }, { "name": "androidx.tracing:tracing", "version": "1.2.0", "cves": [] }, { "name": "androidx.tracing:tracing-ktx", "version": "1.2.0", "cves": [] }, { "name": "androidx.transition:transition", "version": "1.6.0", "cves": [] }, { "name": "androidx.vectordrawable:vectordrawable", "version": "1.1.0", "cves": [] }, { "name": "androidx.vectordrawable:vectordrawable-animated", "version": "1.1.0", "cves": [] }, { "name": "androidx.versionedparcelable:versionedparcelable", "version": "1.1.1", "cves": [] }, { "name": "androidx.viewpager2:viewpager2", "version": "1.1.0", "cves": [] }, { "name": "androidx.viewpager:viewpager", "version": "1.0.0", "cves": [] }, { "name": "androidx.webkit:webkit", "version": "1.12.1", "cves": [] }, { "name": "androidx.window:window", "version": "1.5.1", "cves": [] }, { "name": "androidx.window:window-core", "version": "1.5.1", "cves": [] }, { "name": "androidx.work:work-runtime", "version": "2.9.1", "cves": [] }, { "name": "com.google.android.material:material", "version": "1.9.0", "cves": [] }, { "name": "com.google.dagger:dagger", "version": "2.58", "cves": [] }, { "name": "com.google.dagger:dagger-android", "version": "2.58", "cves": [] }, { "name": "com.google.dagger:dagger-android-support", "version": "2.58", "cves": [] }, { "name": "com.google.dagger:dagger-lint-aar", "version": "2.58", "cves": [] }, { "name": "com.squareup.okhttp3:okhttp", "version": "4.12.0", "cves": [] }, { "name": "kotlinx:coroutines_android", "version": "1.10.2", "cves": [] }, { "name": "kotlinx:coroutines_core", "version": "1.10.2", "cves": [] }, { "name": "kotlinx:coroutines_guava", "version": "1.10.2", "cves": [] }, { "name": "kotlinx:coroutines_play_services", "version": "1.10.2", "cves": [] }, { "name": "kotlinx:coroutines_reactive", "version": "1.10.2", "cves": [] }, { "name": "kotlinx:coroutines_rx2", "version": "1.10.2", "cves": [] } ] }, "control_coverage": { "schema": "apk-scanner.coverage/v1", "framework": "OWASP MASVS v2", "disclaimer": "Static, metadata-only analysis. Each control is scored evidence-for / gap-signal / requires-manual-testing. This is evidence toward a MASVS assessment, NOT a certification — apk-scanner.com is not an authorized assessment lab. Absence of a static finding does not prove a control passes.", "rows": [ { "control": "MASVS-STORAGE-1", "category": "STORAGE", "title": "The app securely stores sensitive data.", "static": "partial", "status": "gap-detected", "count": 1, "findings": [ { "finding_type": 20, "key": "google_api_key", "title": "Google API key (client-shipped; restriction unverified)", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 798 ] } ] }, { "control": "MASVS-STORAGE-2", "category": "STORAGE", "title": "The app prevents leakage of sensitive data.", "static": "partial", "status": "gap-detected", "count": 108, "findings": [ { "finding_type": 2, "key": "firebase_rtdb", "title": "Firebase Realtime Database reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 53, "key": "firebase_storage", "title": "Firebase Storage bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 53, "key": "firebase_storage", "title": "Firebase Storage bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 53, "key": "firebase_storage", "title": "Firebase Storage bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] }, { "finding_type": 84, "key": "alibaba_oss", "title": "Alibaba Cloud OSS bucket reference", "severity": "low", "verified": false, "relationship": "gap-signal", "cwe": [ 200, 284 ] } ] }, { "control": "MASVS-CRYPTO-1", "category": "CRYPTO", "title": "The app employs current strong cryptography and uses it according to best practices.", "static": "partial", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-CRYPTO-2", "category": "CRYPTO", "title": "The app performs key management according to best practices.", "static": "partial", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-AUTH-1", "category": "AUTH", "title": "The app uses secure authentication and authorization protocols.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-AUTH-2", "category": "AUTH", "title": "The app performs local authentication securely.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-AUTH-3", "category": "AUTH", "title": "The app secures sensitive operations with additional authentication.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-NETWORK-1", "category": "NETWORK", "title": "The app secures all network traffic according to current best practices.", "static": "yes", "status": "gap-detected", "count": 1, "findings": [ { "finding_type": 34, "key": "cleartext_traffic", "title": "Cleartext (HTTP) traffic permitted", "severity": "medium", "verified": false, "relationship": "gap-confirmed", "cwe": [ 319 ] } ] }, { "control": "MASVS-NETWORK-2", "category": "NETWORK", "title": "The app verifies the identity of the remote endpoint (e.g. certificate pinning).", "static": "partial", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-PLATFORM-1", "category": "PLATFORM", "title": "The app uses IPC mechanisms securely.", "static": "yes", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-PLATFORM-2", "category": "PLATFORM", "title": "The app uses WebViews securely.", "static": "partial", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-PLATFORM-3", "category": "PLATFORM", "title": "The app uses the user interface securely.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-CODE-1", "category": "CODE", "title": "The app requires an up-to-date platform version.", "static": "yes", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-CODE-2", "category": "CODE", "title": "The app has a mechanism for enforcing updates.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-CODE-3", "category": "CODE", "title": "The app only uses software components without known vulnerabilities.", "static": "yes", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-CODE-4", "category": "CODE", "title": "The app validates and sanitizes all untrusted inputs and follows secure-coding practice.", "static": "partial", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-RESILIENCE-1", "category": "RESILIENCE", "title": "The app validates the integrity of the platform.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-RESILIENCE-2", "category": "RESILIENCE", "title": "The app implements anti-tampering mechanisms.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-RESILIENCE-3", "category": "RESILIENCE", "title": "The app implements anti-static-analysis mechanisms.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-RESILIENCE-4", "category": "RESILIENCE", "title": "The app implements anti-dynamic-analysis techniques.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] }, { "control": "MASVS-PRIVACY-1", "category": "PRIVACY", "title": "The app minimizes access to sensitive data and resources.", "static": "yes", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-PRIVACY-2", "category": "PRIVACY", "title": "The app prevents identification of the user.", "static": "yes", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-PRIVACY-3", "category": "PRIVACY", "title": "The app is transparent about data collection and usage.", "static": "yes", "status": "no-static-findings", "count": 0, "findings": [] }, { "control": "MASVS-PRIVACY-4", "category": "PRIVACY", "title": "The app offers user control over their data.", "static": "manual", "status": "requires-manual-testing", "count": 0, "findings": [] } ], "categories": [ { "category": "STORAGE", "controls": 2, "gaps": 2, "verified": 0, "manual": 0 }, { "category": "CRYPTO", "controls": 2, "gaps": 0, "verified": 0, "manual": 0 }, { "category": "AUTH", "controls": 3, "gaps": 0, "verified": 0, "manual": 3 }, { "category": "NETWORK", "controls": 2, "gaps": 1, "verified": 0, "manual": 0 }, { "category": "PLATFORM", "controls": 3, "gaps": 0, "verified": 0, "manual": 1 }, { "category": "CODE", "controls": 4, "gaps": 0, "verified": 0, "manual": 1 }, { "category": "RESILIENCE", "controls": 4, "gaps": 0, "verified": 0, "manual": 4 }, { "category": "PRIVACY", "controls": 4, "gaps": 0, "verified": 0, "manual": 1 } ] } }, "proof": { "alg": "ed25519", "key_id": "IE6LeZNX4dAAPLGr", "digest_sha256": "25130d0909d913f985f2de83a115df482faa032c667e47ba44bb87541b6260fa", "signature": "qWKQ0uBasRnIJsj7MFouqD8fhNMDloJGrj3jlNFi6EQJNeMfSmhege2VGWZhgtbpgrDd1JJeMqbQ5C9XEO5HDg==", "public_key_pem": "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAwH2fYdYB5nD0CQslDtG3FgafcJBoOX2OGoT80Woksrk=\n-----END PUBLIC KEY-----\n", "verify_url": "https://apk-scanner.com/verify" } }