{"push_id":1012319044,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"8a58f05b15128ca2a4b20371a388e5377527a581","before":"d16fd09979fcf798da5f05879420d4bf569374ba","commits":[{"sha":"d662fc670dd648bb31fe0c46eabaac02bd063a36","author":{"email":"5f6ac7df6173487ee6e4944fd7dd5dd5a949b76f@users.noreply.github.com","name":"James Bogosian"},"message":"Upgrade Apache Commons Collections to v3.2.2\n\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\r\nvulnerability that exists. By merely existing on the classpath, this\r\nlibrary causes the Java serialization parser for the entire JVM process\r\nto go from being a state machine to a turing machine. A turing machine\r\nwith an exec() function!\r\n\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\r\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\r\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","distinct":true,"url":"https://api.github.com/repos/synergynet/synergynet3/commits/d662fc670dd648bb31fe0c46eabaac02bd063a36"},{"sha":"8a58f05b15128ca2a4b20371a388e5377527a581","author":{"email":"7aca204cf745747f72991acfde09eabbef83a149@users.noreply.github.com","name":"SynergyNet"},"message":"Merge pull request #1 from bogosj/patch-1\n\nUpgrade Apache Commons Collections to v3.2.2","distinct":true,"url":"https://api.github.com/repos/synergynet/synergynet3/commits/8a58f05b15128ca2a4b20371a388e5377527a581"}]}