{"action":"closed","number":130,"pull_request":{"url":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/130","id":81257111,"html_url":"https://github.com/ausaccessfed/saml-service/pull/130","diff_url":"https://github.com/ausaccessfed/saml-service/pull/130.diff","patch_url":"https://github.com/ausaccessfed/saml-service/pull/130.patch","issue_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues/130","number":130,"state":"closed","locked":false,"title":"CVE-2016-6317, unsafe query generation risk in AR","user":{"login":"bradleybeddoes","id":86558,"avatar_url":"https://avatars.githubusercontent.com/u/86558?v=3","gravatar_id":"","url":"https://api.github.com/users/bradleybeddoes","html_url":"https://github.com/bradleybeddoes","followers_url":"https://api.github.com/users/bradleybeddoes/followers","following_url":"https://api.github.com/users/bradleybeddoes/following{/other_user}","gists_url":"https://api.github.com/users/bradleybeddoes/gists{/gist_id}","starred_url":"https://api.github.com/users/bradleybeddoes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradleybeddoes/subscriptions","organizations_url":"https://api.github.com/users/bradleybeddoes/orgs","repos_url":"https://api.github.com/users/bradleybeddoes/repos","events_url":"https://api.github.com/users/bradleybeddoes/events{/privacy}","received_events_url":"https://api.github.com/users/bradleybeddoes/received_events","type":"User","site_admin":false},"body":"There is a vulnerability when Active Record is used in conjunction with\r\nJSON parameter parsing. This vulnerability has been assigned the CVE\r\nidentifier CVE-2016-6317.\r\n\r\nDue to the way Active Record interprets parameters in combination with\r\nthe way that JSON parameters are parsed, it is possible for an attacker\r\nto issue unexpected database queries with \"IS NULL\" or empty where\r\nclauses.  This issue does *not* let an attacker insert arbitrary values\r\ninto an SQL query, however they can cause the query to check for NULL or\r\neliminate a WHERE clause when most users wouldn't expect it.","created_at":"2016-08-14T22:56:48Z","updated_at":"2016-08-14T23:23:30Z","closed_at":"2016-08-14T23:23:30Z","merged_at":"2016-08-14T23:23:30Z","merge_commit_sha":"b6bc7babb1a9089f8270cf3222f65685ae50ffa2","assignee":{"login":"rcaught","id":144163,"avatar_url":"https://avatars.githubusercontent.com/u/144163?v=3","gravatar_id":"","url":"https://api.github.com/users/rcaught","html_url":"https://github.com/rcaught","followers_url":"https://api.github.com/users/rcaught/followers","following_url":"https://api.github.com/users/rcaught/following{/other_user}","gists_url":"https://api.github.com/users/rcaught/gists{/gist_id}","starred_url":"https://api.github.com/users/rcaught/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcaught/subscriptions","organizations_url":"https://api.github.com/users/rcaught/orgs","repos_url":"https://api.github.com/users/rcaught/repos","events_url":"https://api.github.com/users/rcaught/events{/privacy}","received_events_url":"https://api.github.com/users/rcaught/received_events","type":"User","site_admin":false},"assignees":[{"login":"rcaught","id":144163,"avatar_url":"https://avatars.githubusercontent.com/u/144163?v=3","gravatar_id":"","url":"https://api.github.com/users/rcaught","html_url":"https://github.com/rcaught","followers_url":"https://api.github.com/users/rcaught/followers","following_url":"https://api.github.com/users/rcaught/following{/other_user}","gists_url":"https://api.github.com/users/rcaught/gists{/gist_id}","starred_url":"https://api.github.com/users/rcaught/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcaught/subscriptions","organizations_url":"https://api.github.com/users/rcaught/orgs","repos_url":"https://api.github.com/users/rcaught/repos","events_url":"https://api.github.com/users/rcaught/events{/privacy}","received_events_url":"https://api.github.com/users/rcaught/received_events","type":"User","site_admin":false}],"milestone":null,"commits_url":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/130/commits","review_comments_url":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/130/comments","review_comment_url":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/comments{/number}","comments_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues/130/comments","statuses_url":"https://api.github.com/repos/ausaccessfed/saml-service/statuses/3307606bf4334dfb62d192e1bfcf60995319d5dd","head":{"label":"ausaccessfed:bugfix/cve-2016-6317","ref":"bugfix/cve-2016-6317","sha":"3307606bf4334dfb62d192e1bfcf60995319d5dd","user":{"login":"ausaccessfed","id":149044,"avatar_url":"https://avatars.githubusercontent.com/u/149044?v=3","gravatar_id":"","url":"https://api.github.com/users/ausaccessfed","html_url":"https://github.com/ausaccessfed","followers_url":"https://api.github.com/users/ausaccessfed/followers","following_url":"https://api.github.com/users/ausaccessfed/following{/other_user}","gists_url":"https://api.github.com/users/ausaccessfed/gists{/gist_id}","starred_url":"https://api.github.com/users/ausaccessfed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ausaccessfed/subscriptions","organizations_url":"https://api.github.com/users/ausaccessfed/orgs","repos_url":"https://api.github.com/users/ausaccessfed/repos","events_url":"https://api.github.com/users/ausaccessfed/events{/privacy}","received_events_url":"https://api.github.com/users/ausaccessfed/received_events","type":"Organization","site_admin":false},"repo":{"id":23208847,"name":"saml-service","full_name":"ausaccessfed/saml-service","owner":{"login":"ausaccessfed","id":149044,"avatar_url":"https://avatars.githubusercontent.com/u/149044?v=3","gravatar_id":"","url":"https://api.github.com/users/ausaccessfed","html_url":"https://github.com/ausaccessfed","followers_url":"https://api.github.com/users/ausaccessfed/followers","following_url":"https://api.github.com/users/ausaccessfed/following{/other_user}","gists_url":"https://api.github.com/users/ausaccessfed/gists{/gist_id}","starred_url":"https://api.github.com/users/ausaccessfed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ausaccessfed/subscriptions","organizations_url":"https://api.github.com/users/ausaccessfed/orgs","repos_url":"https://api.github.com/users/ausaccessfed/repos","events_url":"https://api.github.com/users/ausaccessfed/events{/privacy}","received_events_url":"https://api.github.com/users/ausaccessfed/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/ausaccessfed/saml-service","description":"AAF service responsible for SAML data storage, metadata generation and inter-federation (eduGAIN) metadata processing.","fork":false,"url":"https://api.github.com/repos/ausaccessfed/saml-service","forks_url":"https://api.github.com/repos/ausaccessfed/saml-service/forks","keys_url":"https://api.github.com/repos/ausaccessfed/saml-service/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ausaccessfed/saml-service/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ausaccessfed/saml-service/teams","hooks_url":"https://api.github.com/repos/ausaccessfed/saml-service/hooks","issue_events_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues/events{/number}","events_url":"https://api.github.com/repos/ausaccessfed/saml-service/events","assignees_url":"https://api.github.com/repos/ausaccessfed/saml-service/assignees{/user}","branches_url":"https://api.github.com/repos/ausaccessfed/saml-service/branches{/branch}","tags_url":"https://api.github.com/repos/ausaccessfed/saml-service/tags","blobs_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/refs{/sha}","trees_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ausaccessfed/saml-service/statuses/{sha}","languages_url":"https://api.github.com/repos/ausaccessfed/saml-service/languages","stargazers_url":"https://api.github.com/repos/ausaccessfed/saml-service/stargazers","contributors_url":"https://api.github.com/repos/ausaccessfed/saml-service/contributors","subscribers_url":"https://api.github.com/repos/ausaccessfed/saml-service/subscribers","subscription_url":"https://api.github.com/repos/ausaccessfed/saml-service/subscription","commits_url":"https://api.github.com/repos/ausaccessfed/saml-service/commits{/sha}","git_commits_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/commits{/sha}","comments_url":"https://api.github.com/repos/ausaccessfed/saml-service/comments{/number}","issue_comment_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues/comments{/number}","contents_url":"https://api.github.com/repos/ausaccessfed/saml-service/contents/{+path}","compare_url":"https://api.github.com/repos/ausaccessfed/saml-service/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ausaccessfed/saml-service/merges","archive_url":"https://api.github.com/repos/ausaccessfed/saml-service/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ausaccessfed/saml-service/downloads","issues_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues{/number}","pulls_url":"https://api.github.com/repos/ausaccessfed/saml-service/pulls{/number}","milestones_url":"https://api.github.com/repos/ausaccessfed/saml-service/milestones{/number}","notifications_url":"https://api.github.com/repos/ausaccessfed/saml-service/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ausaccessfed/saml-service/labels{/name}","releases_url":"https://api.github.com/repos/ausaccessfed/saml-service/releases{/id}","deployments_url":"https://api.github.com/repos/ausaccessfed/saml-service/deployments","created_at":"2014-08-22T01:30:23Z","updated_at":"2016-01-19T23:03:11Z","pushed_at":"2016-08-14T23:23:30Z","git_url":"git://github.com/ausaccessfed/saml-service.git","ssh_url":"git@github.com:ausaccessfed/saml-service.git","clone_url":"https://github.com/ausaccessfed/saml-service.git","svn_url":"https://github.com/ausaccessfed/saml-service","homepage":"","size":1069,"stargazers_count":1,"watchers_count":1,"language":"Ruby","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"open_issues_count":7,"forks":2,"open_issues":7,"watchers":1,"default_branch":"develop"}},"base":{"label":"ausaccessfed:develop","ref":"develop","sha":"9717339df9c31f98acaa1f92b7b738f1ee1d1e54","user":{"login":"ausaccessfed","id":149044,"avatar_url":"https://avatars.githubusercontent.com/u/149044?v=3","gravatar_id":"","url":"https://api.github.com/users/ausaccessfed","html_url":"https://github.com/ausaccessfed","followers_url":"https://api.github.com/users/ausaccessfed/followers","following_url":"https://api.github.com/users/ausaccessfed/following{/other_user}","gists_url":"https://api.github.com/users/ausaccessfed/gists{/gist_id}","starred_url":"https://api.github.com/users/ausaccessfed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ausaccessfed/subscriptions","organizations_url":"https://api.github.com/users/ausaccessfed/orgs","repos_url":"https://api.github.com/users/ausaccessfed/repos","events_url":"https://api.github.com/users/ausaccessfed/events{/privacy}","received_events_url":"https://api.github.com/users/ausaccessfed/received_events","type":"Organization","site_admin":false},"repo":{"id":23208847,"name":"saml-service","full_name":"ausaccessfed/saml-service","owner":{"login":"ausaccessfed","id":149044,"avatar_url":"https://avatars.githubusercontent.com/u/149044?v=3","gravatar_id":"","url":"https://api.github.com/users/ausaccessfed","html_url":"https://github.com/ausaccessfed","followers_url":"https://api.github.com/users/ausaccessfed/followers","following_url":"https://api.github.com/users/ausaccessfed/following{/other_user}","gists_url":"https://api.github.com/users/ausaccessfed/gists{/gist_id}","starred_url":"https://api.github.com/users/ausaccessfed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ausaccessfed/subscriptions","organizations_url":"https://api.github.com/users/ausaccessfed/orgs","repos_url":"https://api.github.com/users/ausaccessfed/repos","events_url":"https://api.github.com/users/ausaccessfed/events{/privacy}","received_events_url":"https://api.github.com/users/ausaccessfed/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/ausaccessfed/saml-service","description":"AAF service responsible for SAML data storage, metadata generation and inter-federation (eduGAIN) metadata processing.","fork":false,"url":"https://api.github.com/repos/ausaccessfed/saml-service","forks_url":"https://api.github.com/repos/ausaccessfed/saml-service/forks","keys_url":"https://api.github.com/repos/ausaccessfed/saml-service/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ausaccessfed/saml-service/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ausaccessfed/saml-service/teams","hooks_url":"https://api.github.com/repos/ausaccessfed/saml-service/hooks","issue_events_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues/events{/number}","events_url":"https://api.github.com/repos/ausaccessfed/saml-service/events","assignees_url":"https://api.github.com/repos/ausaccessfed/saml-service/assignees{/user}","branches_url":"https://api.github.com/repos/ausaccessfed/saml-service/branches{/branch}","tags_url":"https://api.github.com/repos/ausaccessfed/saml-service/tags","blobs_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/refs{/sha}","trees_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ausaccessfed/saml-service/statuses/{sha}","languages_url":"https://api.github.com/repos/ausaccessfed/saml-service/languages","stargazers_url":"https://api.github.com/repos/ausaccessfed/saml-service/stargazers","contributors_url":"https://api.github.com/repos/ausaccessfed/saml-service/contributors","subscribers_url":"https://api.github.com/repos/ausaccessfed/saml-service/subscribers","subscription_url":"https://api.github.com/repos/ausaccessfed/saml-service/subscription","commits_url":"https://api.github.com/repos/ausaccessfed/saml-service/commits{/sha}","git_commits_url":"https://api.github.com/repos/ausaccessfed/saml-service/git/commits{/sha}","comments_url":"https://api.github.com/repos/ausaccessfed/saml-service/comments{/number}","issue_comment_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues/comments{/number}","contents_url":"https://api.github.com/repos/ausaccessfed/saml-service/contents/{+path}","compare_url":"https://api.github.com/repos/ausaccessfed/saml-service/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ausaccessfed/saml-service/merges","archive_url":"https://api.github.com/repos/ausaccessfed/saml-service/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ausaccessfed/saml-service/downloads","issues_url":"https://api.github.com/repos/ausaccessfed/saml-service/issues{/number}","pulls_url":"https://api.github.com/repos/ausaccessfed/saml-service/pulls{/number}","milestones_url":"https://api.github.com/repos/ausaccessfed/saml-service/milestones{/number}","notifications_url":"https://api.github.com/repos/ausaccessfed/saml-service/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ausaccessfed/saml-service/labels{/name}","releases_url":"https://api.github.com/repos/ausaccessfed/saml-service/releases{/id}","deployments_url":"https://api.github.com/repos/ausaccessfed/saml-service/deployments","created_at":"2014-08-22T01:30:23Z","updated_at":"2016-01-19T23:03:11Z","pushed_at":"2016-08-14T23:23:30Z","git_url":"git://github.com/ausaccessfed/saml-service.git","ssh_url":"git@github.com:ausaccessfed/saml-service.git","clone_url":"https://github.com/ausaccessfed/saml-service.git","svn_url":"https://github.com/ausaccessfed/saml-service","homepage":"","size":1069,"stargazers_count":1,"watchers_count":1,"language":"Ruby","has_issues":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":2,"mirror_url":null,"open_issues_count":7,"forks":2,"open_issues":7,"watchers":1,"default_branch":"develop"}},"_links":{"self":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/130"},"html":{"href":"https://github.com/ausaccessfed/saml-service/pull/130"},"issue":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/issues/130"},"comments":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/issues/130/comments"},"review_comments":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/130/comments"},"review_comment":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/pulls/130/commits"},"statuses":{"href":"https://api.github.com/repos/ausaccessfed/saml-service/statuses/3307606bf4334dfb62d192e1bfcf60995319d5dd"}},"merged":true,"mergeable":null,"mergeable_state":"unknown","merged_by":{"login":"rcaught","id":144163,"avatar_url":"https://avatars.githubusercontent.com/u/144163?v=3","gravatar_id":"","url":"https://api.github.com/users/rcaught","html_url":"https://github.com/rcaught","followers_url":"https://api.github.com/users/rcaught/followers","following_url":"https://api.github.com/users/rcaught/following{/other_user}","gists_url":"https://api.github.com/users/rcaught/gists{/gist_id}","starred_url":"https://api.github.com/users/rcaught/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rcaught/subscriptions","organizations_url":"https://api.github.com/users/rcaught/orgs","repos_url":"https://api.github.com/users/rcaught/repos","events_url":"https://api.github.com/users/rcaught/events{/privacy}","received_events_url":"https://api.github.com/users/rcaught/received_events","type":"User","site_admin":false},"comments":0,"review_comments":0,"commits":1,"additions":34,"deletions":34,"changed_files":1}}
{"actor":{"display_login":"rcaught"}}