{"push_id":1015523985,"size":1,"distinct_size":1,"ref":"refs/heads/patch-1","head":"cfcb915219408eb708a7d9ba27435f48b597c868","before":"fd161d0698b9fd2a5485e33e873929484f080658","commits":[{"sha":"cfcb915219408eb708a7d9ba27435f48b597c868","author":{"email":"8907f81aa97fe92d7044e068be2a9902d001efb9@google.com","name":"Shannon VanWagner"},"message":"Upgrade Apache Commons Collections to v3.2.2\n\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\r\nvulnerability that exists. By merely existing on the classpath, this\r\nlibrary causes the Java serialization parser for the entire JVM process\r\nto go from being a state machine to a turing machine. A turing machine\r\nwith an exec() function!\r\n\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\r\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\r\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","distinct":true,"url":"https://api.github.com/repos/shannon-vanwagner/wisdom-jdbc/commits/cfcb915219408eb708a7d9ba27435f48b597c868"}]}