# Use of Outdated Vulnerable Component

**URL:** <https://discuss.zetetic.net/t/use-of-outdated-vulnerable-component/6025>\
**Category:** SQLCipher\
**Created:** [July 28, 2023, 1:10pm UTC](https://discuss.zetetic.net/t/use-of-outdated-vulnerable-component/6025 "2023-07-28T13:10:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Abu\_Basith](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/abu_basith/32/2049_2.png) [@Abu\_Basith](https://discuss.zetetic.net/u/Abu_Basith)\
**Post date:** [July 28, 2023, 1:10pm UTC](https://discuss.zetetic.net/t/use-of-outdated-vulnerable-component/6025/1 "2023-07-28T13:10:09Z")

</div>

Hi all,

I am using the sqlCipher version “net.zetetic:android-database-sqlcipher:4.0.1@aar”. So, regarding this, our security team reported which mentioned below.

Use of Outdated Vulnerable Component - SQLite and OpenSSL:  
2 issues: sqlite version `3.26.0` and `openssl` version `1.1.1

Could you please verify this report statement? I checked our latest sqlcipher version 4.5.3, do I need to increase the sqlcipher version?

Also searched regarding this in the Android document side they mentioned like:  
“The version of SQLite depends on the version of Android”. but I mentioned in my manifest file target Api 33.

Thank you.

---

<div class="post-metadata">

**Author:** ![developernotes](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/developernotes/32/1309_2.png) [@developernotes](https://discuss.zetetic.net/u/developernotes)\
**Post date:** [July 28, 2023, 1:38pm UTC](https://discuss.zetetic.net/t/use-of-outdated-vulnerable-component/6025/2 "2023-07-28T13:38:33Z")

</div>

Hi @Abu_Basith,

The latest version of SQLCipher for Android is 4.5.4 and utilizes OpenSSL 1.1.1t for non-FIPS based packages. The latest SQLCipher for Android is supported on Android API 33.

---

<div class="post-metadata">

**Author:** ![Abu\_Basith](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.zetetic.net/abu_basith/32/2049_2.png) [@Abu\_Basith](https://discuss.zetetic.net/u/Abu_Basith)\
**Post date:** [July 28, 2023, 2:34pm UTC](https://discuss.zetetic.net/t/use-of-outdated-vulnerable-component/6025/3 "2023-07-28T14:34:15Z")

</div>

Ok, thank you so much @developernotes .
