Vulnerability data and CVE tracking

Android apps can now gate tap-to-pay on whether a specific NFC fix is installed

The stable AndroidX Security State libraries report patch state for the core OS, Play system modules and the Linux kernel separately, and let an app ask whether a named CVE is fixed before it turns a feature on.