{"push_id":1013741795,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"362397460922927f76fdafe9471e5ea300a72d14","before":"5c1708f7c940531427d39aded71940e9c8983518","commits":[{"sha":"bae9773f88651293c716c4d3fb5d9515685b135e","author":{"email":"5c044613004c9935eed99a5c155f4a602acc84a5@google.com","name":"timevortex"},"message":"Upgrade Apache Commons Collections to v3.2.2\n\n\r\nVersion 3.2.1 has a CVSS 10.0 vulnerability. That's the worst kind of\r\nvulnerability that exists. By merely existing on the classpath, this\r\nlibrary causes the Java serialization parser for the entire JVM process\r\nto go from being a state machine to a turing machine. A turing machine\r\nwith an exec() function!\r\n\r\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\r\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\r\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/","distinct":true,"url":"https://api.github.com/repos/AJCStriker/Movecraft-3/commits/bae9773f88651293c716c4d3fb5d9515685b135e"},{"sha":"362397460922927f76fdafe9471e5ea300a72d14","author":{"email":"60c6d277a8bd81de7fdde19201bf9c58a3df08f4@briefly.io","name":"Alexander Christie"},"message":"Merge pull request #161 from timevortex/patch-1\n\nUpgrade Apache Commons Collections to v3.2.2","distinct":true,"url":"https://api.github.com/repos/AJCStriker/Movecraft-3/commits/362397460922927f76fdafe9471e5ea300a72d14"}]}