description: "NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service.
problem types: Use of Hard-coded Credentials
affected:
{
vendor: NewsPicks, Inc.
product: "NewsPicks" App for Android
versions:
version: versions 10.4.5 and earlier, status: affected
}
{
vendor: NewsPicks, Inc.
product: "NewsPicks" App for iOS
versions:
version: versions 10.4.2 and earlier, status: affected
}
