{"action":"created","issue":{"url":"https://api.github.com/repos/jmcriffey/babel-istanbul/issues/73","repository_url":"https://api.github.com/repos/jmcriffey/babel-istanbul","labels_url":"https://api.github.com/repos/jmcriffey/babel-istanbul/issues/73/labels{/name}","comments_url":"https://api.github.com/repos/jmcriffey/babel-istanbul/issues/73/comments","events_url":"https://api.github.com/repos/jmcriffey/babel-istanbul/issues/73/events","html_url":"https://github.com/jmcriffey/babel-istanbul/pull/73","id":177049349,"number":73,"title":"Bump fileset dependency version","user":{"login":"pdehaan","id":557895,"avatar_url":"https://avatars.githubusercontent.com/u/557895?v=3","gravatar_id":"","url":"https://api.github.com/users/pdehaan","html_url":"https://github.com/pdehaan","followers_url":"https://api.github.com/users/pdehaan/followers","following_url":"https://api.github.com/users/pdehaan/following{/other_user}","gists_url":"https://api.github.com/users/pdehaan/gists{/gist_id}","starred_url":"https://api.github.com/users/pdehaan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pdehaan/subscriptions","organizations_url":"https://api.github.com/users/pdehaan/orgs","repos_url":"https://api.github.com/users/pdehaan/repos","events_url":"https://api.github.com/users/pdehaan/events{/privacy}","received_events_url":"https://api.github.com/users/pdehaan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-09-14T23:29:46Z","updated_at":"2016-11-02T23:32:17Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/jmcriffey/babel-istanbul/pulls/73","html_url":"https://github.com/jmcriffey/babel-istanbul/pull/73","diff_url":"https://github.com/jmcriffey/babel-istanbul/pull/73.diff","patch_url":"https://github.com/jmcriffey/babel-istanbul/pull/73.patch"},"body":"Re: https://nodesecurity.io/advisories/118\n\nIt looks like **minimatch@<=3.0.1** may have a potential ReDoS.\nThis PR just bumps **fileset** to `2.x` which includes the latest **minimatch**.\n#### Before:\n\n``` sh\n$ nsp check\n\n(+) 1 vulnerabilities found\n┌───────────────┬───────────────────────────────────────────────────────────────────────────────────────────────────┐\n│               │ Regular Expression Denial of Service                                                              │\n├───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤\n│ Name          │ minimatch                                                                                         │\n├───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤\n│ Installed     │ 2.0.10                                                                                            │\n├───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤\n│ Vulnerable    │ <=3.0.1                                                                                           │\n├───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤\n│ Patched       │ >=3.0.2                                                                                           │\n├───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤\n│ Path          │ babel-istanbul@0.11.0 > fileset@0.2.1 > minimatch@2.0.10                                          │\n├───────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────┤\n│ More Info     │ https://nodesecurity.io/advisories/118                                                            │\n└───────────────┴───────────────────────────────────────────────────────────────────────────────────────────────────┘\n\n```\n#### After:\n\n``` sh\n$ nsp check\n\n(+) No known vulnerabilities found\n```\n"},"comment":{"url":"https://api.github.com/repos/jmcriffey/babel-istanbul/issues/comments/258030992","html_url":"https://github.com/jmcriffey/babel-istanbul/pull/73#issuecomment-258030992","issue_url":"https://api.github.com/repos/jmcriffey/babel-istanbul/issues/73","id":258030992,"user":{"login":"toddw","id":140000,"avatar_url":"https://avatars.githubusercontent.com/u/140000?v=3","gravatar_id":"","url":"https://api.github.com/users/toddw","html_url":"https://github.com/toddw","followers_url":"https://api.github.com/users/toddw/followers","following_url":"https://api.github.com/users/toddw/following{/other_user}","gists_url":"https://api.github.com/users/toddw/gists{/gist_id}","starred_url":"https://api.github.com/users/toddw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/toddw/subscriptions","organizations_url":"https://api.github.com/users/toddw/orgs","repos_url":"https://api.github.com/users/toddw/repos","events_url":"https://api.github.com/users/toddw/events{/privacy}","received_events_url":"https://api.github.com/users/toddw/received_events","type":"User","site_admin":false},"created_at":"2016-11-02T23:32:17Z","updated_at":"2016-11-02T23:32:17Z","body":"@pdehaan is there anything else you would like to see to get this merged?"}}
{"actor":{"display_login":"toddw"}}