{"action":"created","issue":{"url":"https://api.github.com/repos/spring-projects/spring-batch-admin/issues/43","repository_url":"https://api.github.com/repos/spring-projects/spring-batch-admin","labels_url":"https://api.github.com/repos/spring-projects/spring-batch-admin/issues/43/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-batch-admin/issues/43/comments","events_url":"https://api.github.com/repos/spring-projects/spring-batch-admin/issues/43/events","html_url":"https://github.com/spring-projects/spring-batch-admin/pull/43","id":139482421,"number":43,"title":"Upgrade Apache Commons Collections to v3.2.2","user":{"login":"gmlewis","id":6598971,"avatar_url":"https://avatars.githubusercontent.com/u/6598971?v=3","gravatar_id":"","url":"https://api.github.com/users/gmlewis","html_url":"https://github.com/gmlewis","followers_url":"https://api.github.com/users/gmlewis/followers","following_url":"https://api.github.com/users/gmlewis/following{/other_user}","gists_url":"https://api.github.com/users/gmlewis/gists{/gist_id}","starred_url":"https://api.github.com/users/gmlewis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmlewis/subscriptions","organizations_url":"https://api.github.com/users/gmlewis/orgs","repos_url":"https://api.github.com/users/gmlewis/repos","events_url":"https://api.github.com/users/gmlewis/events{/privacy}","received_events_url":"https://api.github.com/users/gmlewis/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-03-09T05:49:55Z","updated_at":"2016-07-21T15:28:05Z","closed_at":"2016-07-21T15:28:05Z","pull_request":{"url":"https://api.github.com/repos/spring-projects/spring-batch-admin/pulls/43","html_url":"https://github.com/spring-projects/spring-batch-admin/pull/43","diff_url":"https://github.com/spring-projects/spring-batch-admin/pull/43.diff","patch_url":"https://github.com/spring-projects/spring-batch-admin/pull/43.patch"},"body":"\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That is the worst kind of\nvulnerability that exists. By merely existing on the classpath, this\nlibrary causes the Java serialization parser for the entire JVM process\nto go from being a state machine to a turing machine. A turing machine\nwith an exec() function!\n\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/"},"comment":{"url":"https://api.github.com/repos/spring-projects/spring-batch-admin/issues/comments/234289773","html_url":"https://github.com/spring-projects/spring-batch-admin/pull/43#issuecomment-234289773","issue_url":"https://api.github.com/repos/spring-projects/spring-batch-admin/issues/43","id":234289773,"user":{"login":"gmlewis","id":6598971,"avatar_url":"https://avatars.githubusercontent.com/u/6598971?v=3","gravatar_id":"","url":"https://api.github.com/users/gmlewis","html_url":"https://github.com/gmlewis","followers_url":"https://api.github.com/users/gmlewis/followers","following_url":"https://api.github.com/users/gmlewis/following{/other_user}","gists_url":"https://api.github.com/users/gmlewis/gists{/gist_id}","starred_url":"https://api.github.com/users/gmlewis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gmlewis/subscriptions","organizations_url":"https://api.github.com/users/gmlewis/orgs","repos_url":"https://api.github.com/users/gmlewis/repos","events_url":"https://api.github.com/users/gmlewis/events{/privacy}","received_events_url":"https://api.github.com/users/gmlewis/received_events","type":"User","site_admin":false},"created_at":"2016-07-21T15:28:05Z","updated_at":"2016-07-21T15:28:05Z","body":"Sorry for the noise.  I will close out the request.  Feel free to do whatever you like with the information you have learned from the links."}}
{"actor":{"display_login":"gmlewis"}}