{"action":"created","issue":{"url":"https://api.github.com/repos/GIScience/helios/issues/25","repository_url":"https://api.github.com/repos/GIScience/helios","labels_url":"https://api.github.com/repos/GIScience/helios/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/GIScience/helios/issues/25/comments","events_url":"https://api.github.com/repos/GIScience/helios/issues/25/events","html_url":"https://github.com/GIScience/helios/pull/25","id":333019157,"node_id":"MDExOlB1bGxSZXF1ZXN0MTk1MzUxNTc4","number":25,"title":"[Snyk] Fix for 3 vulnerable dependencies","user":{"login":"snyk-bot","id":19733683,"node_id":"MDQ6VXNlcjE5NzMzNjgz","avatar_url":"https://avatars2.githubusercontent.com/u/19733683?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-bot","html_url":"https://github.com/snyk-bot","followers_url":"https://api.github.com/users/snyk-bot/followers","following_url":"https://api.github.com/users/snyk-bot/following{/other_user}","gists_url":"https://api.github.com/users/snyk-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-bot/subscriptions","organizations_url":"https://api.github.com/users/snyk-bot/orgs","repos_url":"https://api.github.com/users/snyk-bot/repos","events_url":"https://api.github.com/users/snyk-bot/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-bot/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-16T22:21:55Z","updated_at":"2018-07-10T17:42:21Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/GIScience/helios/pulls/25","html_url":"https://github.com/GIScience/helios/pull/25","diff_url":"https://github.com/GIScience/helios/pull/25.diff","patch_url":"https://github.com/GIScience/helios/pull/25.patch"},"body":"#### Description\nThis PR fixes one or more vulnerable packages in the `maven` dependencies of this project.\nSee the [Snyk test report](https://snyk.io/test/github/a7d6b738-29c5-4414-95d5-ca6eebe3cf15/master..snyk-fix-pylhua) for more details.\n\n#### Snyk Project: [giscience/helios:pom.xml](https://snyk.io/org/thegreatrefrigerator/project/a7d6b738-29c5-4414-95d5-ca6eebe3cf15)\n#### Snyk Organization: [TheGreatRefrigerator](https://snyk.io/org/thegreatrefrigerator)\n\n#### Changes included in this PR\n\n- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:\n    - pom.xml\n\n\n#### Vulnerabilities that will be fixed\n##### With an upgrade:\n  - `pom.xml`\n      - `commons-validator:commons-validator@1.4.0 > commons-validator:commons-validator@1.5.0` \n          - [Arbitrary Code Execution](https://snyk.io/vuln/SNYK-JAVA-COMMONSBEANUTILS-30077)\n      - `org.codehaus.groovy:groovy-all@2.1.9 > org.codehaus.groovy:groovy-all@2.4.7` \n          - [Deserialization of Untrusted Data](https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSGROOVY-31510)\n          - [Deserialization of Untrusted Data](https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSGROOVY-30076)\n\n\n\nYou can read more about Snyk's upgrade and patch logic in [Snyk's documentation](https://snyk.io/docs/using-snyk/).\n\nCheck the changes in this PR to ensure they won't cause issues with your project.\n\nStay secure,\nThe Snyk team\n\n[//]: # (snyk:metadata:{\"type\":\"auto\",\"packageManager\":\"maven\",\"vulns\":[\"SNYK-JAVA-COMMONSBEANUTILS-30077\",\"SNYK-JAVA-ORGCODEHAUSGROOVY-30076\",\"SNYK-JAVA-ORGCODEHAUSGROOVY-31510\"],\"patch\":[],\"upgrade\":[\"SNYK-JAVA-COMMONSBEANUTILS-30077\",\"SNYK-JAVA-ORGCODEHAUSGROOVY-30076\",\"SNYK-JAVA-ORGCODEHAUSGROOVY-31510\"],\"isBreakingChange\":false,\"env\":\"prod\"})\n"},"comment":{"url":"https://api.github.com/repos/GIScience/helios/issues/comments/403907522","html_url":"https://github.com/GIScience/helios/pull/25#issuecomment-403907522","issue_url":"https://api.github.com/repos/GIScience/helios/issues/25","id":403907522,"node_id":"MDEyOklzc3VlQ29tbWVudDQwMzkwNzUyMg==","user":{"login":"deuxbot","id":12772593,"node_id":"MDQ6VXNlcjEyNzcyNTkz","avatar_url":"https://avatars0.githubusercontent.com/u/12772593?v=4","gravatar_id":"","url":"https://api.github.com/users/deuxbot","html_url":"https://github.com/deuxbot","followers_url":"https://api.github.com/users/deuxbot/followers","following_url":"https://api.github.com/users/deuxbot/following{/other_user}","gists_url":"https://api.github.com/users/deuxbot/gists{/gist_id}","starred_url":"https://api.github.com/users/deuxbot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deuxbot/subscriptions","organizations_url":"https://api.github.com/users/deuxbot/orgs","repos_url":"https://api.github.com/users/deuxbot/repos","events_url":"https://api.github.com/users/deuxbot/events{/privacy}","received_events_url":"https://api.github.com/users/deuxbot/received_events","type":"User","site_admin":false},"created_at":"2018-07-10T17:42:21Z","updated_at":"2018-07-10T17:42:21Z","author_association":"CONTRIBUTOR","body":"The changes proposed here have been added in ddc068dfb33b2f9b58cb35c8e62a353ebb8607f9."}}
{"actor":{"display_login":"deuxbot"}}