Just wondering if Vungle is going to be updated for Android, as the current version running Vungle, has a security vulnerability. See below extract from an email I received from "Google Play Developer Support":
Hello Google Play Developer,
We wanted to let you know that your app(s) listed at the end of this email utilize a version of the Vungle ad library that contains a security vulnerability. The vulnerability can enable attackers to launch a man-in-the-middle attack against user devices by proxying network traffic and injecting a payload extracted by the Vungle app. For more information about the vulnerability, please see
https://gist.github.com/Fuzion24/6535f8b9dc2a51745173.
Next Steps:
The vulnerability was addressed in Vungle v3.3.0. Please upgrade to Vungle v3.3.0 or higher as soon as possible. To check your Vungle version, you can do a grep search for:
VungleDroid/
The latest version of Vungle can be downloaded from the Vungle website. You can refer to this Vungle help center article for help upgrading. For other technical questions, please use
https://www.stackoverflow.com/questions.
To confirm you’ve upgraded correctly, submit the updated version of your app to the Developer Console and check back after five hours to make sure the warning is gone.
While these issues may not affect every app that uses Vungle, it’s best to stay up to date on all security patches. Apps with vulnerabilities that expose users to risk of compromise may be considered dangerous products in violation of the Content Policy and section 4.4 of the Developer Distribution Agreement.
Before publishing an app, make sure it's compliant with the Developer Distribution Agreement and our Content Policies.
If you feel we’ve sent this warning in error, please contact our appeals team through the App Developer help center.
Regards,
The Google Play Team
Affected application(s):
com.id8games.soccer: Soccer Ball Juggle