Back to library list
com.facebook.android__facebook-core
Column Insecure: Icon 
indicates the version is insecure, otherwise 
Column CryptoMisuse: Icon indicates the version has cryptographic API misuse, otherwise
indicates the version is insecure, otherwise
Column CryptoMisuse: Icon
indicates the version has cryptographic API misuse, otherwise
| Version | Insecure | CryptoMisuse | Rule name | Method | Statement | Details |
|---|---|---|---|---|---|---|
| 4.27.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer722) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer200) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.28.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer733) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer200) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.29.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer751) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer200) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.30.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer322) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer841) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.31.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer315) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer842) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.32.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer315) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer844) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.33.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer330) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer855) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.34.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer328) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer853) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.35.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer325) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer858) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.36.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer326) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer858) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.36.1 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer328) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer859) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.37.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer332) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer856) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.38.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer340) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer865) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.38.1 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer338) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer862) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| 4.39.0 |
|
|
MessageDigest | com.facebook.FacebookSdk.getApplicationSignature(Landroid/content/Context;)Ljava/lang/String; | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer336) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.appevents.AppEvent.<init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/Double;Landroid/os/Bundle;ZLjava/util/UUID;)V | r4 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(varReplacer866) | First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512} |
| - | - |
|
MessageDigest | com.facebook.internal.Utility.sha1hash([B)Ljava/lang/String; | r2 = staticinvoke <java.security.MessageDigest: java.security.MessageDigest getInstance(java.lang.String)>(r0) | First parameter (with value "SHA-1") should be any of {SHA-256, SHA-384, SHA-512} |