Usage of MD5 flagged as vulnerability in mobile penetration testing

[kmaschke85]

Check List

Thanks for considering to open an issue. Before you submit your issue, please confirm these boxes are checked.

• I have read the wiki page and cheat sheet, but there is no information I need.
• I have searched in existing issues, but did not find a same one.
• I want to report a problem instead of asking a question. It'd better to use kingfisher tag in Stack Overflow to ask a question.

Issue Description

What

Our app has to pass mobile penetration testing and during scanning our code base, Kingfisher was flagged as being vulnerable because of using MD5.

Reproduce

Integrate Kingfisher into an iOS project via Cocoapods and use MobSF to scan the code base.

Other Comment

Should be simple to replace MD5 with SHA256 provided by CryptoKit, but minimum iOS version would need to be bumped to 13.0.