{"action":"created","issue":{"url":"https://api.github.com/repos/ludei/webview-plus/issues/44","labels_url":"https://api.github.com/repos/ludei/webview-plus/issues/44/labels{/name}","comments_url":"https://api.github.com/repos/ludei/webview-plus/issues/44/comments","events_url":"https://api.github.com/repos/ludei/webview-plus/issues/44/events","html_url":"https://github.com/ludei/webview-plus/issues/44","id":59448323,"number":44,"title":"OpenSSL security alert issue","user":{"login":"severedsea","id":5338851,"avatar_url":"https://avatars.githubusercontent.com/u/5338851?v=3","gravatar_id":"","url":"https://api.github.com/users/severedsea","html_url":"https://github.com/severedsea","followers_url":"https://api.github.com/users/severedsea/followers","following_url":"https://api.github.com/users/severedsea/following{/other_user}","gists_url":"https://api.github.com/users/severedsea/gists{/gist_id}","starred_url":"https://api.github.com/users/severedsea/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/severedsea/subscriptions","organizations_url":"https://api.github.com/users/severedsea/orgs","repos_url":"https://api.github.com/users/severedsea/repos","events_url":"https://api.github.com/users/severedsea/events{/privacy}","received_events_url":"https://api.github.com/users/severedsea/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-03-02T07:42:09Z","updated_at":"2015-05-13T09:40:28Z","closed_at":null,"body":"> Your app is statically linking against a version of OpenSSL that has multiple security vulnerabilities.You should update OpenSSL as soon as possible.\r\nThe vulnerabilities were addressed in OpenSSL versions beginning with 1.0.1h, 1.0.0m, and 0.9.8za. To confirm your OpenSSL version, you can do a grep via (\"$ unzip -p YourApp.apk | strings | grep \"OpenSSL\"\"). For more information about the vulnerability, please consult http://www.openssl.org/news/secadv_20140605.txt. \r\nTo confirm that you've upgraded correctly, upload the updated version to the Developer Console and check back after five hours.\r\nPlease note, while it's unclear whether these specific issues affect your application, applications with vulnerabilities that expose users to risk of compromise may be considered \"dangerous products\" and subject to removal from Google Play.\r\n\r\nReceived this security alert from Google regarding our newly submitted app. \r\n\r\nI tracked down which plugin is causing this issue and narrowed it down to webview-plus. The command  provided by Google showed me that, with webview-plus included, there is an OpenSSL v1.0.1e linked to our app. Removing webview-plus plugin and running the command doesn't show any OpenSSL version. \r\n\r\nCan I verify if the team is aware of this? If you are, are you planning on fixing this to avoid the risk of Google Play taking down apps that have webview-plus installed? "},"comment":{"url":"https://api.github.com/repos/ludei/webview-plus/issues/comments/101595099","html_url":"https://github.com/ludei/webview-plus/issues/44#issuecomment-101595099","issue_url":"https://api.github.com/repos/ludei/webview-plus/issues/44","id":101595099,"user":{"login":"severedsea","id":5338851,"avatar_url":"https://avatars.githubusercontent.com/u/5338851?v=3","gravatar_id":"","url":"https://api.github.com/users/severedsea","html_url":"https://github.com/severedsea","followers_url":"https://api.github.com/users/severedsea/followers","following_url":"https://api.github.com/users/severedsea/following{/other_user}","gists_url":"https://api.github.com/users/severedsea/gists{/gist_id}","starred_url":"https://api.github.com/users/severedsea/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/severedsea/subscriptions","organizations_url":"https://api.github.com/users/severedsea/orgs","repos_url":"https://api.github.com/users/severedsea/repos","events_url":"https://api.github.com/users/severedsea/events{/privacy}","received_events_url":"https://api.github.com/users/severedsea/received_events","type":"User","site_admin":false},"created_at":"2015-05-13T09:40:28Z","updated_at":"2015-05-13T09:40:28Z","body":"@kacinskas - Thanks! Appreciate your help! I'll give it a shot and update you guys. "}}