{"action":"created","issue":{"url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/issues/141","repository_url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin","labels_url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/issues/141/labels{/name}","comments_url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/issues/141/comments","events_url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/issues/141/events","html_url":"https://github.com/gwt-plugins/gwt-eclipse-plugin/issues/141","id":141052587,"number":141,"title":" Upgrade Apache Commons Collections to v3.2.2","user":{"login":"elharo","id":1005544,"avatar_url":"https://avatars.githubusercontent.com/u/1005544?v=3","gravatar_id":"","url":"https://api.github.com/users/elharo","html_url":"https://github.com/elharo","followers_url":"https://api.github.com/users/elharo/followers","following_url":"https://api.github.com/users/elharo/following{/other_user}","gists_url":"https://api.github.com/users/elharo/gists{/gist_id}","starred_url":"https://api.github.com/users/elharo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elharo/subscriptions","organizations_url":"https://api.github.com/users/elharo/orgs","repos_url":"https://api.github.com/users/elharo/repos","events_url":"https://api.github.com/users/elharo/events{/privacy}","received_events_url":"https://api.github.com/users/elharo/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/labels/High%20Priority","name":"High Priority","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-03-15T17:59:00Z","updated_at":"2016-08-09T23:55:26Z","closed_at":null,"body":"tools/gwt-dev-tools/.classpath  reference commons collection 3.2.1\r\n\r\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\r\nvulnerability that exists. By merely existing on the classpath, this\r\nlibrary causes the Java serialization parser for the entire JVM process\r\nto go from being a state machine to a turing machine. A turing machine\r\nwith an exec() function!\r\n\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\r\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\r\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/"},"comment":{"url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/issues/comments/238728126","html_url":"https://github.com/gwt-plugins/gwt-eclipse-plugin/issues/141#issuecomment-238728126","issue_url":"https://api.github.com/repos/gwt-plugins/gwt-eclipse-plugin/issues/141","id":238728126,"user":{"login":"branflake2267","id":1326504,"avatar_url":"https://avatars.githubusercontent.com/u/1326504?v=3","gravatar_id":"","url":"https://api.github.com/users/branflake2267","html_url":"https://github.com/branflake2267","followers_url":"https://api.github.com/users/branflake2267/followers","following_url":"https://api.github.com/users/branflake2267/following{/other_user}","gists_url":"https://api.github.com/users/branflake2267/gists{/gist_id}","starred_url":"https://api.github.com/users/branflake2267/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/branflake2267/subscriptions","organizations_url":"https://api.github.com/users/branflake2267/orgs","repos_url":"https://api.github.com/users/branflake2267/repos","events_url":"https://api.github.com/users/branflake2267/events{/privacy}","received_events_url":"https://api.github.com/users/branflake2267/received_events","type":"User","site_admin":false},"created_at":"2016-08-09T23:55:26Z","updated_at":"2016-08-09T23:55:26Z","body":"It turns out they were not connected to anything or bound with the feature/build. "}}
{"actor":{"display_login":"branflake2267"}}