{"action":"created","issue":{"url":"https://api.github.com/repos/esmasui/AndroidJUnit4/issues/10","repository_url":"https://api.github.com/repos/esmasui/AndroidJUnit4","labels_url":"https://api.github.com/repos/esmasui/AndroidJUnit4/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/esmasui/AndroidJUnit4/issues/10/comments","events_url":"https://api.github.com/repos/esmasui/AndroidJUnit4/issues/10/events","html_url":"https://github.com/esmasui/AndroidJUnit4/pull/10","id":139429189,"number":10,"title":"Upgrade Apache Commons Collections to v3.2.2","user":{"login":"bstau","id":828717,"avatar_url":"https://avatars.githubusercontent.com/u/828717?v=3","gravatar_id":"","url":"https://api.github.com/users/bstau","html_url":"https://github.com/bstau","followers_url":"https://api.github.com/users/bstau/followers","following_url":"https://api.github.com/users/bstau/following{/other_user}","gists_url":"https://api.github.com/users/bstau/gists{/gist_id}","starred_url":"https://api.github.com/users/bstau/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bstau/subscriptions","organizations_url":"https://api.github.com/users/bstau/orgs","repos_url":"https://api.github.com/users/bstau/repos","events_url":"https://api.github.com/users/bstau/events{/privacy}","received_events_url":"https://api.github.com/users/bstau/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-08T23:45:05Z","updated_at":"2016-03-09T06:42:37Z","closed_at":"2016-03-09T06:42:21Z","pull_request":{"url":"https://api.github.com/repos/esmasui/AndroidJUnit4/pulls/10","html_url":"https://github.com/esmasui/AndroidJUnit4/pull/10","diff_url":"https://github.com/esmasui/AndroidJUnit4/pull/10.diff","patch_url":"https://github.com/esmasui/AndroidJUnit4/pull/10.patch"},"body":"Version 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\r\nvulnerability that exists. By merely existing on the classpath, this\r\nlibrary causes the Java serialization parser for the entire JVM process\r\nto go from being a state machine to a turing machine. A turing machine\r\nwith an exec() function!\r\n\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\r\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\r\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/"},"comment":{"url":"https://api.github.com/repos/esmasui/AndroidJUnit4/issues/comments/194140873","html_url":"https://github.com/esmasui/AndroidJUnit4/pull/10#issuecomment-194140873","issue_url":"https://api.github.com/repos/esmasui/AndroidJUnit4/issues/10","id":194140873,"user":{"login":"esmasui","id":590922,"avatar_url":"https://avatars.githubusercontent.com/u/590922?v=3","gravatar_id":"","url":"https://api.github.com/users/esmasui","html_url":"https://github.com/esmasui","followers_url":"https://api.github.com/users/esmasui/followers","following_url":"https://api.github.com/users/esmasui/following{/other_user}","gists_url":"https://api.github.com/users/esmasui/gists{/gist_id}","starred_url":"https://api.github.com/users/esmasui/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/esmasui/subscriptions","organizations_url":"https://api.github.com/users/esmasui/orgs","repos_url":"https://api.github.com/users/esmasui/repos","events_url":"https://api.github.com/users/esmasui/events{/privacy}","received_events_url":"https://api.github.com/users/esmasui/received_events","type":"User","site_admin":false},"created_at":"2016-03-09T06:42:37Z","updated_at":"2016-03-09T06:42:37Z","body":"@bstau Thank you!"}}