Unsafe implementation of the HostnameVerifier interface related to PayPal android

user_10507382 0
Viewed 1042

I never use HostNameVerifier in my application google still sending mail and fix the deadline and I need a suggestion for this question.

I got a alert in google play console find below its related to PayPal I didn't found these classes in my code.

Vulnerable classes:

lib.android.paypal.com.magnessdk.network.d$1

lib.android.paypal.com.magnessdk.network.e$1

android-security
2 Answers

Try to update your paypal package to the last version.

user_59632100

You can update the paypal to the latest as per the braintree issue they have resolved the issue from the paypal side. For braintree the latest version is:

implementation "com.braintreepayments.api:braintree:3.15.0"

More details available on githug repository: https://github.com/braintree/braintree_android/issues/325

user_20245270
Related