{ "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json", "version": "2.1.0", "runs": [ { "tool": { "driver": { "name": "apk-scanner.com", "informationUri": "https://apk-scanner.com", "version": "1.0.0", "rules": [ { "id": "APKSCAN-20-google_api_key", "name": "GoogleApiKey", "shortDescription": { "text": "Google API key (client-shipped; restriction unverified)" }, "fullDescription": { "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control." }, "helpUri": "https://apk-scanner.com/finding/google_api_key", "help": { "text": "Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control." }, "defaultConfiguration": { "level": "note" }, "properties": { "tags": [ "security", "CWE-798", "MASVS-STORAGE-1" ], "security-severity": "2.0", "cwe": [ "CWE-798" ], "masvs": [ "MASVS-STORAGE-1" ] } }, { "id": "APKSCAN-35-exported_provider", "name": "ExportedProvider", "shortDescription": { "text": "Exported ContentProvider without permission" }, "fullDescription": { "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly." }, "helpUri": "https://apk-scanner.com/finding/exported_provider", "help": { "text": "Set android:exported=false, or require a signature-level android:permission, and scope grantUriPermissions narrowly." }, "defaultConfiguration": { "level": "note" }, "properties": { "tags": [ "security", "CWE-926", "CWE-284", "MASVS-PLATFORM-1" ], "security-severity": "2.0", "cwe": [ "CWE-926", "CWE-284" ], "masvs": [ "MASVS-PLATFORM-1" ] } }, { "id": "APKSCAN-53-firebase_storage", "name": "FirebaseStorage", "shortDescription": { "text": "Firebase Storage bucket reference" }, "fullDescription": { "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, "helpUri": "https://apk-scanner.com/finding/firebase_storage", "help": { "text": "Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open." }, "defaultConfiguration": { "level": "note" }, "properties": { "tags": [ "security", "CWE-200", "CWE-284", "MASVS-STORAGE-2" ], "security-severity": "2.0", "cwe": [ "CWE-200", "CWE-284" ], "masvs": [ "MASVS-STORAGE-2" ] } }, { "id": "APKSCAN-77-ds_underdeclare", "name": "DsUnderdeclare", "shortDescription": { "text": "Data Safety label omits an observed data category" }, "fullDescription": { "text": "Update the Play Data Safety form to declare the observed data category, or remove the capability if the data is not actually collected." }, "helpUri": "https://apk-scanner.com/finding/ds_underdeclare", "help": { "text": "Update the Play Data Safety form to declare the observed data category, or remove the capability if the data is not actually collected." }, "defaultConfiguration": { "level": "note" }, "properties": { "tags": [ "security", "CWE-359", "MASVS-PRIVACY-3" ], "security-severity": "2.0", "cwe": [ "CWE-359" ], "masvs": [ "MASVS-PRIVACY-3" ] } } ] } }, "automationDetails": { "id": "apk-scanner/org.adblockplus.browser/8dcb2417-00f8-4503-8d59-b952dc042ed0" }, "invocations": [ { "executionSuccessful": true } ], "results": [ { "ruleId": "APKSCAN-20-google_api_key", "level": "note", "message": { "text": "Google API key (client-shipped; restriction unverified)" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "resources.arsc" } } } ], "partialFingerprints": { "apkscanFingerprint": "fdb0edb4e077f0b0bf23b6f5fe06fce19189bdeae26ca113b48dd52e588ea41d" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-35-exported_provider", "level": "note", "message": { "text": "Exported content provider with path-restricted permissions (third-party library artifact, shared across 8 unrelated developers)" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "AndroidManifest.xml:um.chrome.browser.provider.ChromeBrowserProvider" } } } ], "partialFingerprints": { "apkscanFingerprint": "090922ee5466e7b95463be573118a7930318436b2f97e4f8846ab461d2179401" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-confirmed" } }, { "ruleId": "APKSCAN-35-exported_provider", "level": "note", "message": { "text": "Exported content provider without permission (third-party library artifact, shared across 7 unrelated developers)" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "AndroidManifest.xml:r.autofill.AutofillThirdPartyModeContentProvider" } } } ], "partialFingerprints": { "apkscanFingerprint": "a23c6dad0c3a3e32c4729537faf8a93e3b8b4a54de063147b54dedf1d59d8b3f" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-confirmed" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "049db50bf093c33455605fe0716dc7eb72723023987edd8658f5b8b185bd95d3" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "1b7660ae0a768e78968890225d90c6b52e9ad569ac7d27d8f378ed62230a5eb8" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "4bef7741bfa3e1d1d208b8299ee63dc26c87859602fc93c66c433900b8775664" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "d88d1498cfceaa42a2580f78a890b45b940deb0c0a8380810103dd165ef12a61" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "c41adc8fb0ed69d17be3b290771e429795cae4fc731a4c67af3ccd6351532f9a" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "e6b93984c1bf60737e3cfcec53fbda9fc410d5238bca2d7de209937af6b045b5" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "a08b8843f31007639c0f4d26899f6f39031268751f984c3826bd9c52ce53f0fa" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "c06465677a2333552d34b8f46bb4a657f32a812176e75be0ce484b5bf6ec5676" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "9502fd538a3c9dba06a4e5727d6e78e7ee11701bb0d0e35c1414195c02ccb523" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "c5867738aca97fee468eae5cb9056aa029f2d5e38898f67966ffc42da8f54f13" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "8769b60086db7d270cfa8cb1bf4590db091ee8670fdc4998da1d32bcf8fbc6da" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "3eb1b9afca2e25864d11ceff6657d6f0f5ee3d8d12d88c8335428d16980095ba" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "73461c71acff640de6e5f8352f48b8c52115884cb5d059e9ad6985a3a23b3466" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "95cbd4d5cf1f798bac9827522dd227f299e4e4502693271eb7d074549462be23" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "ff94843ceba38557309f3b9fd03e97a069ae10851aea8fd4879796ad1a5ab236" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "ceda304f9ef0fc376f75b3a7f9f9ab8d18e6b69b5b342b7f1a834e0c4a0115ce" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "f30a0834b270b39ddc2a907939295bc3f3efd803b0dc02c4dab5f28963eea09f" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "d0f3d85057c7e81388d7ec4e6021378603cdce6945bc2d2bfcd6d37f53ec378e" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "d6755684cb9f9592f26af355419ed97ed52ed5452cc63434620c1f2d93661c31" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-53-firebase_storage", "level": "note", "message": { "text": "Firebase Storage bucket reference" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "lib/arm64-v8a/libchrome.so" } } } ], "partialFingerprints": { "apkscanFingerprint": "978b28542a07555609c95093ca14c3ac9ad5d9f0f857d262a516e1c515f95703" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } }, { "ruleId": "APKSCAN-77-ds_underdeclare", "level": "note", "message": { "text": "Data Safety label omits Contacts" }, "locations": [ { "physicalLocation": { "artifactLocation": { "uri": "data-safety:Contacts" } } } ], "partialFingerprints": { "apkscanFingerprint": "52d6df5eafe80ad7de0275ee425de0bf8d715439e92a9026117bea4d546827d0" }, "properties": { "severity": "low", "verified": false, "relationship": "gap-signal" } } ], "properties": { "analysis": { "issues": [], "stages": { "pii": "complete", "sbom": "complete", "signing": "certificate_parsed", "strings": "complete", "manifest": "complete" }, "status": "complete", "grading": { "policy": "static-coverage-v1", "blockers": [], "eligible": true }, "timings_ms": { "total": 30478.299, "harvest": 11376.630000000017, "detectors": 16885.55399999972 }, "bytes_total": 263388279, "bytes_scanned": 263388279, "bytes_skipped": 0, "files_processed": 4718, "coverage_version": 2, "string_encodings": [ "ascii", "utf16le" ], "signature_validation": "not_performed" }, "provenance": { "mode": "static", "artifacts": [ { "name": "base.apk", "sha256": "9f19e8b9f62b4b5bad1493d7ece8d219e1fc538d43bbe9250d152d0df99567c2" }, { "name": "chrome.apk", "sha256": "60b655e1067f38d223355c485ac404cef2b40d72dc1c805cd9ff0df527b5c086" }, { "name": "on_demand.apk", "sha256": "80fc9e48c83df8931d0b15bde3624b1e819d013cf7cff563d8918d12f7c17b80" } ], "ruleset_sha256": "3bb79cc3710b0fb021feaa322578f4cffe08396a97c51b34df092b5a05891d5e" }, "apk_sha256": "9f19e8b9f62b4b5bad1493d7ece8d219e1fc538d43bbe9250d152d0df99567c2", "app_id": "org.adblockplus.browser", "app_title": "Adblock Browser: Fast & Secure", "app_version": "3.12.1", "scan_id": "8dcb2417-00f8-4503-8d59-b952dc042ed0", "scanned_at": "2026-10-08T02:51:58.793Z" } } ] }