{"push_id":1017576561,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"0dc4e75784bab9099a7b016783e7c2225f5a9991","before":"681ecbb88639012a8806231295dbd7f510f7a266","commits":[{"sha":"58564b14567d1d1b36899f7ba52268cfe71b83e3","author":{"email":"2e0d011d53f22943cc59958926c53d0d84fe78da@gmail.com","name":"Sergio Campamá"},"message":"Upgrade Apache Commons Collections to v3.2.2\n\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\r\nvulnerability that exists. By merely existing on the classpath, this\r\nlibrary causes the Java serialization parser for the entire JVM process\r\nto go from being a state machine to a turing machine. A turing machine\r\nwith an exec() function!\r\n\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\r\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\r\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","distinct":true,"url":"https://api.github.com/repos/netoFlores/javaWorkSpace/commits/58564b14567d1d1b36899f7ba52268cfe71b83e3"},{"sha":"0dc4e75784bab9099a7b016783e7c2225f5a9991","author":{"email":"3ca40ed64d75da9ad65ba0233f5eeec29f07d0f2@gmail.com","name":"Ernesto Flores"},"message":"Merge pull request #1 from sergiocampama/patch-1\n\nUpgrade Apache Commons Collections to v3.2.2","distinct":true,"url":"https://api.github.com/repos/netoFlores/javaWorkSpace/commits/0dc4e75784bab9099a7b016783e7c2225f5a9991"}]}