Security issue with GIF dependency

[3dmg]

Hi,
we got informed by CERT Coordination Center <https://www.cert.org> that there was a security vulnerability in android-gif-drawable.
You can find more info here: https://nvd.nist.gov/vuln/detail/CVE-2019-11932
We are using the latest version 1.2.19 without any problems.

Maybe you want to update your docs: https://noties.io/Markwon/docs/v4/image/#mediadecoder

Br,
Markus

[noties]

Hello @3dmg !

This is exactly the reason why these dependencies must be specified explicitly in the build.gradle of your project. I will change the wording and remove hardcoded versions

Thank you

[noties]

Done

[noties]

Interesting detail - pl.droidsonroids.gif:android-gif-drawable:1.2.19 uses 17 as minimum SDK. So, I will keep compilation of images plugin with older 1.2.15 for now as Markwon still supports 16.