firebase / firebase/firebase-android-sdk

Old Netty version for Appdistribution

Open
#7,712 2 comments 0 reactions 0 assignees View on GitHub
api: appdistribution
Dominant language
Java
Stars
2.6k
Forks
710
Avg merge
2d 9h
Merged PRs (30d)
31

Description

### [READ] Step 1: Are you in the right place?
Yes
### [REQUIRED] Step 2: Describe your environment

- Android Studio version: **\Android Studio Otter 3 Feature Drop | 2025.2.3**
- Firebase Component: **App Distribution**
- Component version: **34.8.0 BOM**
appDistribution Gradle 5.2.0

### [REQUIRED] Step 3: Describe the problem
Security scanners detected a vulnerability inside CVE-2025-58057 com.google.firebase.appdistribution.gradle.plugin.*. Suggested update to newer version.

#### Steps to reproduce:

#### Relevant Code:

```
./gradlew buildEnvironment
| +--- io.grpc:grpc-netty:1.69.1
| | +--- io.grpc:grpc-api:1.69.1 (*)
| | +--- io.netty:netty-codec-http2:4.1.110.Final

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.