{"push_id":1014776496,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"45c3d4458ddbbbdef556c065e1fe7ad2eaaaa3c6","before":"ba99b606b8e6f0d9c0de5dcb90895a21d7fb45a4","commits":[{"sha":"9b64475eb365e64a5a46b15c7dea8961b0ca7987","author":{"email":"2591e5f46f28d303f9dc027d475a5c60d8dea17a@van.derveer.com","name":"Dan Van Derveer"},"message":"Upgrade Apache Commons Collections to v3.2.2\n\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\nvulnerability that exists. By merely existing on the classpath, this\nlibrary causes the Java serialization parser for the entire JVM process\nto go from being a state machine to a turing machine. A turing machine\nwith an exec() function!\n\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","distinct":true,"url":"https://api.github.com/repos/jguglielmi/OASIS-Maven/commits/9b64475eb365e64a5a46b15c7dea8961b0ca7987"},{"sha":"45c3d4458ddbbbdef556c065e1fe7ad2eaaaa3c6","author":{"email":"63aaf86d4e996970db2b75b3761dd3308641a45b@gmail.com","name":"Jaison Guglielmi"},"message":"Merge pull request #18 from cyberkni/master\n\nUpgrade Apache Commons Collections to v3.2.2","distinct":true,"url":"https://api.github.com/repos/jguglielmi/OASIS-Maven/commits/45c3d4458ddbbbdef556c065e1fe7ad2eaaaa3c6"}]}