{"action":"created","issue":{"url":"https://api.github.com/repos/rubysec/ruby-advisory-db/issues/271","repository_url":"https://api.github.com/repos/rubysec/ruby-advisory-db","labels_url":"https://api.github.com/repos/rubysec/ruby-advisory-db/issues/271/labels{/name}","comments_url":"https://api.github.com/repos/rubysec/ruby-advisory-db/issues/271/comments","events_url":"https://api.github.com/repos/rubysec/ruby-advisory-db/issues/271/events","html_url":"https://github.com/rubysec/ruby-advisory-db/issues/271","id":181146539,"number":271,"title":"False positives about vulnerabilities in Rails 4.2.7.1, advises downgrade.","user":{"login":"matthewtuck","id":618311,"avatar_url":"https://avatars.githubusercontent.com/u/618311?v=3","gravatar_id":"","url":"https://api.github.com/users/matthewtuck","html_url":"https://github.com/matthewtuck","followers_url":"https://api.github.com/users/matthewtuck/followers","following_url":"https://api.github.com/users/matthewtuck/following{/other_user}","gists_url":"https://api.github.com/users/matthewtuck/gists{/gist_id}","starred_url":"https://api.github.com/users/matthewtuck/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/matthewtuck/subscriptions","organizations_url":"https://api.github.com/users/matthewtuck/orgs","repos_url":"https://api.github.com/users/matthewtuck/repos","events_url":"https://api.github.com/users/matthewtuck/events{/privacy}","received_events_url":"https://api.github.com/users/matthewtuck/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-10-05T13:02:41Z","updated_at":"2016-10-06T07:14:30Z","closed_at":"2016-10-06T07:14:29Z","body":"Using ````bundler-audit```` I'm getting errors such as:\r\n\r\n    Name: actionpack\r\n    Version: 4.2.7.1\r\n    Advisory: CVE-2015-7576\r\n    Criticality: Unknown\r\n    URL: https://groups.google.com/forum/#!topic/rubyonrails-security/ANv0HDHEC3k\r\n    Title: Timing attack vulnerability in basic authentication in Action Controller.\r\n    Solution: upgrade to ~> 5.0.0.beta1.1, ~> 4.2.5.1, ~> 4.1.14.1, ~> 3.2.22.1\r\n\r\nIn actionpack, actionview, activemodel, activerecord.\r\n\r\nThis seems to be similar to #244 for a later Rails version."},"comment":{"url":"https://api.github.com/repos/rubysec/ruby-advisory-db/issues/comments/251884875","html_url":"https://github.com/rubysec/ruby-advisory-db/issues/271#issuecomment-251884875","issue_url":"https://api.github.com/repos/rubysec/ruby-advisory-db/issues/271","id":251884875,"user":{"login":"reedloden","id":352251,"avatar_url":"https://avatars.githubusercontent.com/u/352251?v=3","gravatar_id":"","url":"https://api.github.com/users/reedloden","html_url":"https://github.com/reedloden","followers_url":"https://api.github.com/users/reedloden/followers","following_url":"https://api.github.com/users/reedloden/following{/other_user}","gists_url":"https://api.github.com/users/reedloden/gists{/gist_id}","starred_url":"https://api.github.com/users/reedloden/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/reedloden/subscriptions","organizations_url":"https://api.github.com/users/reedloden/orgs","repos_url":"https://api.github.com/users/reedloden/repos","events_url":"https://api.github.com/users/reedloden/events{/privacy}","received_events_url":"https://api.github.com/users/reedloden/received_events","type":"User","site_admin":false},"created_at":"2016-10-06T07:14:29Z","updated_at":"2016-10-06T07:14:29Z","body":"No worries. Happy auditing!"}}
{"actor":{"display_login":"reedloden"}}