AdMob CMP publishes a single line of releases; only the latest published version on Maven Central is supported. There are no maintained older major versions.
Please do not open a public GitHub issue for a security vulnerability.
Instead, use GitHub's private vulnerability reporting for this repository, or email miyanimeet02@gmail.com with:
- A description of the vulnerability and its potential impact.
- Steps to reproduce, or a minimal reproduction project if possible.
- The
admob-cmpversion(s) affected.
This is a single-maintainer open-source project; there is no formal SLA, but reports are reviewed as soon as practical and a fix or mitigation is prioritized once confirmed. Credit is given in the release notes unless you ask to remain anonymous.
admob-cmp is a thin Kotlin Multiplatform wrapper around Google Mobile Ads
and User Messaging Platform. Vulnerabilities in the underlying Google SDKs
themselves should be reported to Google, not here — see the
compatibility page for
the exact GMA/UMP versions each release binds.