{"action":"created","issue":{"url":"https://api.github.com/repos/call4paperz/call4paperz/issues/155","repository_url":"https://api.github.com/repos/call4paperz/call4paperz","labels_url":"https://api.github.com/repos/call4paperz/call4paperz/issues/155/labels{/name}","comments_url":"https://api.github.com/repos/call4paperz/call4paperz/issues/155/comments","events_url":"https://api.github.com/repos/call4paperz/call4paperz/issues/155/events","html_url":"https://github.com/call4paperz/call4paperz/pull/155","id":170991321,"number":155,"title":"Upgrade devise to 3.5.10 and fixes CVE-2015-8314","user":{"login":"lucasrenan","id":114986,"avatar_url":"https://avatars.githubusercontent.com/u/114986?v=3","gravatar_id":"","url":"https://api.github.com/users/lucasrenan","html_url":"https://github.com/lucasrenan","followers_url":"https://api.github.com/users/lucasrenan/followers","following_url":"https://api.github.com/users/lucasrenan/following{/other_user}","gists_url":"https://api.github.com/users/lucasrenan/gists{/gist_id}","starred_url":"https://api.github.com/users/lucasrenan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lucasrenan/subscriptions","organizations_url":"https://api.github.com/users/lucasrenan/orgs","repos_url":"https://api.github.com/users/lucasrenan/repos","events_url":"https://api.github.com/users/lucasrenan/events{/privacy}","received_events_url":"https://api.github.com/users/lucasrenan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-08-13T03:55:32Z","updated_at":"2016-08-14T15:55:55Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/call4paperz/call4paperz/pulls/155","html_url":"https://github.com/call4paperz/call4paperz/pull/155","diff_url":"https://github.com/call4paperz/call4paperz/pull/155.diff","patch_url":"https://github.com/call4paperz/call4paperz/pull/155.patch"},"body":"> Devise version before 3.5.4 uses cookies to implement a “Remember me” functionality. However, it generates the same cookie for all devices. If an attacker manages to steal a remember me cookie and the user does not change the password frequently, the cookie can be used to gain access to the application indefinitely.\r\n\r\nThe bug regarding not sending reconfirmation e-mail after user change e-mail is also fixed, see: https://github.com/plataformatec/devise/commit/1d57169c7bd12977a6697a5a06cda265442bb5c8\r\n\r\ncloses #135 "},"comment":{"url":"https://api.github.com/repos/call4paperz/call4paperz/issues/comments/239680991","html_url":"https://github.com/call4paperz/call4paperz/pull/155#issuecomment-239680991","issue_url":"https://api.github.com/repos/call4paperz/call4paperz/issues/155","id":239680991,"user":{"login":"lucianosousa","id":44833,"avatar_url":"https://avatars.githubusercontent.com/u/44833?v=3","gravatar_id":"","url":"https://api.github.com/users/lucianosousa","html_url":"https://github.com/lucianosousa","followers_url":"https://api.github.com/users/lucianosousa/followers","following_url":"https://api.github.com/users/lucianosousa/following{/other_user}","gists_url":"https://api.github.com/users/lucianosousa/gists{/gist_id}","starred_url":"https://api.github.com/users/lucianosousa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lucianosousa/subscriptions","organizations_url":"https://api.github.com/users/lucianosousa/orgs","repos_url":"https://api.github.com/users/lucianosousa/repos","events_url":"https://api.github.com/users/lucianosousa/events{/privacy}","received_events_url":"https://api.github.com/users/lucianosousa/received_events","type":"User","site_admin":false},"created_at":"2016-08-14T15:55:55Z","updated_at":"2016-08-14T15:55:55Z","body":"@lucasrenan Coveralls notice that test coverage decreases a little bit, can you also take a look on it?"}}
{"actor":{"display_login":"lucianosousa"}}