Issues

Firebase NowSecure security issues

api: analytics

#16514

· BitByAVampire opened

on Aug 14, 2026

[FR]: Analytics: hold events logged while collection is disabled and upload them on enable (ATT-deferred consent)

api: analytics

type: feature request

#16509

· adamma2048 opened

on Aug 14, 2026

[GoogleAppMeasurement 12.17.0] IDFV persisted in plaintext in google-app-measurement.sql — flagged as "PII in Internal Storage" by security scanner (NowSecure)

api: analytics

#16508

· naresh-banavath opened

on Aug 14, 2026

[Analytics/GoogleAppMeasurement 12.17.0] Security-scanner findings: MD5/SHA‑1 (CC_MD5/CC_SHA1) in analytics event hashing, JWT persisted in GDT cache, and undeclared tracking domains

api: analytics

#16506

· naresh-banavath opened

on Aug 13, 2026

Firebase Auth returns no user for recently active iOS users

api: auth

#16498

· zsofiaserenyi opened

on Aug 11, 2026

Cloud Firestore native SDK fails with EHOSTUNREACH on physical iPhone while REST and Simulator succeed

api: firestore

needs-info

#16496

· judewdodson-star opened

on Aug 10, 2026

[Performance][iOS] Severe production crash after Firebase 12.16.0 in NSURLSession delegate instrumentation

api: performance

#16488

· codeDancer668 opened

on Aug 9, 2026

Analytics / GoogleAppMeasurement 12.15.0+ auto-links Apple-private "UIUtilities" framework, breaking SPM builds on the iOS 26 SDK

api: analytics

needs-info

#16486

· ivanvelkov2coders opened

on Aug 7, 2026

Firestore: unacked writes replayed on reconnect, double-applying FieldValue.increment (see firebase-android-sdk#8440)

api: firestore

#16475

· eli1stark opened

on Aug 3, 2026

[Perf] Crash in `objc_loadWeakRetained` via `-[PAGWeakProxy respondsToSelector:]` — `FPRProxyObjectHelper` reads and ISA-swizzles a `__weak` delegate ivar

api: performance

#16469

· kvukusic opened

on Jul 30, 2026

SwiftUI Previews fail with JIT runtime linking failure (`_APM*` symbols not found) since 12.15.0 when FirebaseAnalytics is used in a Swift package static library target

api: analytics

type: bug

#16467

· y-hakutaku opened

on Jul 30, 2026

A NowSecure scan reports Components with Known Vulnerabilities for `libz.1.dylib` (`zlib` `1.2.12`) in our iOS app binary built with Firebase iOS SDK.

GoogleUtilities

needs-attention

#16440

· MuraliSaiTummala opened

on Jul 23, 2026

Navigation Menu

Uh oh!

All issues

Firebase NowSecure security issues

[FR]: Analytics: hold events logged while collection is disabled and upload them on enable (ATT-deferred consent)

[GoogleAppMeasurement 12.17.0] IDFV persisted in plaintext in google-app-measurement.sql — flagged as "PII in Internal Storage" by security scanner (NowSecure)

[Analytics/GoogleAppMeasurement 12.17.0] Security-scanner findings: MD5/SHA‑1 (CC_MD5/CC_SHA1) in analytics event hashing, JWT persisted in GDT cache, and undeclared tracking domains

Firebase Auth returns no user for recently active iOS users

Cloud Firestore native SDK fails with EHOSTUNREACH on physical iPhone while REST and Simulator succeed

[Performance][iOS] Severe production crash after Firebase 12.16.0 in NSURLSession delegate instrumentation

Analytics / GoogleAppMeasurement 12.15.0+ auto-links Apple-private "UIUtilities" framework, breaking SPM builds on the iOS 26 SDK

Firestore: unacked writes replayed on reconnect, double-applying FieldValue.increment (see firebase-android-sdk#8440)

[Perf] Crash in `objc_loadWeakRetained` via `-[PAGWeakProxy respondsToSelector:]` — `FPRProxyObjectHelper` reads and ISA-swizzles a `__weak` delegate ivar

SwiftUI Previews fail with JIT runtime linking failure (`_APM*` symbols not found) since 12.15.0 when FirebaseAnalytics is used in a Swift package static library target

A NowSecure scan reports Components with Known Vulnerabilities for `libz.1.dylib` (`zlib` `1.2.12`) in our iOS app binary built with Firebase iOS SDK.

Uh oh!

Search results