title: Google Play reject Cordova application 'cause contains security vulnerabilities for users
body: <p>I developed an application on Apache Cordova, I followed all the steps to generate the .apk to upload on Google Play. I tried many times but Google's response is the same:</p>
  
  <blockquote>
    <p><em>We rejected APP, package ID com.xxx.app, for violating our dangerous products policy. If you submitted an update, the previous version of
    your app is still available on Google Play. This app uses software
    that contains security vulnerabilities for users. Below is the list of
    vulnerabilities and the corresponding APK versions that were detected
    in your recent submission. Please upgrade your app(s) as soon as
    possible and increment the version number of the upgraded APK.
    <strong>Vulnerability Apache Cordova: The vulnerabilities were fixed in Apache Cordova v.3.5.1</strong>.</em></p>
  </blockquote>
  
  <p>I have the latest version of Cordova (5.4.1).</p>
  
  <p>The following will detail the steps that I followed for installation and project development:</p>
  
  <ul>
  <li>Start the download of Cordova from the console Node.js using the command npm install -g Cordova.</li>
  <li>Install Java: version 1.8.0_65.</li>
  <li>Install Android SDK.</li>
  <li>Add Java and SDK to PATH.</li>
  <li>I downloaded the necessary components of the Android SDK.</li>
  <li>Create the project through the commands. (Cordova create Projectxxxx).</li>
  <li>Add the Android platform.</li>
  <li>I copied my application code in the www folder.</li>
  <li>Add the plugins needed for my project: splashscreen and sqlite.</li>
  <li>I tested the application on the Android emulator and other mobile phones. All good. Runs perfect.</li>
  <li><p>To create the signed APK file, these are the steps:</p>
  
  <p>-Cordova build --release android. (This generated the android-release-unsigned.apk on platforms / android / build / outputs
  / apk).</p>
  
  <p>-Then, I generated the keystore.</p>
  
  <p>-After the jarsigner.</p>
  
  <p>-Finally: zipalign.</p></li>
  <li><p>I upload end-app.apk to Google Play.</p></li>
  </ul>
  
  <p>Another detail that I have is that cordova.js generated version is 4.1.1. But the console version is 5.4.1 (Command: Cordova -version). 
  I did everything by node.js console.</p>
  
  <p>Attemps:
  I uploaded an APK without js components. Only with cordova.js and it not worked.
  I installed all over again in a newly installed windows and neither worked.</p>
  
  <p>My version is higher than 3.5.1. I can not find the solution.</p>