{"action":"closed","number":54,"pull_request":{"url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/54","id":231101451,"node_id":"MDExOlB1bGxSZXF1ZXN0MjMxMTAxNDUx","html_url":"https://github.com/snyk-fixtures/maven-with-vulns/pull/54","diff_url":"https://github.com/snyk-fixtures/maven-with-vulns/pull/54.diff","patch_url":"https://github.com/snyk-fixtures/maven-with-vulns/pull/54.patch","issue_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/54","number":54,"state":"closed","locked":false,"title":"[Snyk] Fix for 3 vulnerable dependencies","user":{"login":"snyk-bot","id":19733683,"node_id":"MDQ6VXNlcjE5NzMzNjgz","avatar_url":"https://avatars2.githubusercontent.com/u/19733683?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-bot","html_url":"https://github.com/snyk-bot","followers_url":"https://api.github.com/users/snyk-bot/followers","following_url":"https://api.github.com/users/snyk-bot/following{/other_user}","gists_url":"https://api.github.com/users/snyk-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-bot/subscriptions","organizations_url":"https://api.github.com/users/snyk-bot/orgs","repos_url":"https://api.github.com/users/snyk-bot/repos","events_url":"https://api.github.com/users/snyk-bot/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-bot/received_events","type":"User","site_admin":false},"body":"#### Description\nThis PR fixes one or more vulnerable packages in the `maven` dependencies of this project.\nSee the [Snyk test report](https://app.snyk.io/org/gha/test/github/1c5ef51a-29b7-412c-97c8-6241f7e19afa/master..snyk-fix-cr36fe) for more details.\n\n#### Snyk Project: [snyk-fixtures/maven-with-vulns:pom.xml](https://app.snyk.io/org/gha/project/1c5ef51a-29b7-412c-97c8-6241f7e19afa)\n#### Snyk Organization: [gha](https://app.snyk.io/org/gha)\n\n\n#### Changes included in this PR\n\n- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:\n    - pom.xml\n\n\n#### Vulnerabilities that will be fixed\n##### With an upgrade:\n  - `pom.xml`\n      - `org.apache.struts:struts2-core@2.3.20 > org.apache.struts:struts2-core@2.3.36` \n          - [Arbitrary Code Execution](https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30401)\n          - [Denial of Service (DoS)](https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-30082)\n          - [Information Disclosure](https://snyk.io/vuln/SNYK-JAVA-COMMONSFILEUPLOAD-31540)\n\n\n\nYou can read more about Snyk's upgrade and patch logic in [Snyk's documentation](https://snyk.io/docs/using-snyk/).\n\nCheck the changes in this PR to ensure they won't cause issues with your project.\n\nStay secure,\nThe Snyk team\n\n_**Note**: You are seeing this because you or someone else with access to this repository has authorised Snyk to open Fix PRs. To review the settings for this Snyk project please go to the [project settings page](https://app.snyk.io/org/gha/project/1c5ef51a-29b7-412c-97c8-6241f7e19afa/settings)._\n\n[//]: # (snyk:metadata:{\"type\":\"auto\",\"packageManager\":\"maven\",\"vulns\":[\"SNYK-JAVA-COMMONSFILEUPLOAD-30082\",\"SNYK-JAVA-COMMONSFILEUPLOAD-30401\",\"SNYK-JAVA-COMMONSFILEUPLOAD-31540\"],\"patch\":[],\"upgrade\":[\"SNYK-JAVA-COMMONSFILEUPLOAD-30082\",\"SNYK-JAVA-COMMONSFILEUPLOAD-30401\",\"SNYK-JAVA-COMMONSFILEUPLOAD-31540\"],\"isBreakingChange\":false,\"env\":\"prod\"})\n","created_at":"2018-11-15T08:04:23Z","updated_at":"2018-12-10T10:56:00Z","closed_at":"2018-12-10T10:56:00Z","merged_at":null,"merge_commit_sha":"26656904946709a655db5eb9353d3467a02604b4","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/54/commits","review_comments_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/54/comments","review_comment_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/comments{/number}","comments_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/54/comments","statuses_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/statuses/85830a616af834b40599b70d8e4d59058f2ef24e","head":{"label":"snyk-fixtures:snyk-fix-cr36fe","ref":"snyk-fix-cr36fe","sha":"85830a616af834b40599b70d8e4d59058f2ef24e","user":{"login":"snyk-fixtures","id":25479154,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI1NDc5MTU0","avatar_url":"https://avatars2.githubusercontent.com/u/25479154?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-fixtures","html_url":"https://github.com/snyk-fixtures","followers_url":"https://api.github.com/users/snyk-fixtures/followers","following_url":"https://api.github.com/users/snyk-fixtures/following{/other_user}","gists_url":"https://api.github.com/users/snyk-fixtures/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-fixtures/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-fixtures/subscriptions","organizations_url":"https://api.github.com/users/snyk-fixtures/orgs","repos_url":"https://api.github.com/users/snyk-fixtures/repos","events_url":"https://api.github.com/users/snyk-fixtures/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-fixtures/received_events","type":"Organization","site_admin":false},"repo":{"id":108829707,"node_id":"MDEwOlJlcG9zaXRvcnkxMDg4Mjk3MDc=","name":"maven-with-vulns","full_name":"snyk-fixtures/maven-with-vulns","private":false,"owner":{"login":"snyk-fixtures","id":25479154,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI1NDc5MTU0","avatar_url":"https://avatars2.githubusercontent.com/u/25479154?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-fixtures","html_url":"https://github.com/snyk-fixtures","followers_url":"https://api.github.com/users/snyk-fixtures/followers","following_url":"https://api.github.com/users/snyk-fixtures/following{/other_user}","gists_url":"https://api.github.com/users/snyk-fixtures/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-fixtures/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-fixtures/subscriptions","organizations_url":"https://api.github.com/users/snyk-fixtures/orgs","repos_url":"https://api.github.com/users/snyk-fixtures/repos","events_url":"https://api.github.com/users/snyk-fixtures/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-fixtures/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/snyk-fixtures/maven-with-vulns","description":null,"fork":false,"url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns","forks_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/forks","keys_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/keys{/key_id}","collaborators_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/teams","hooks_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/hooks","issue_events_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/events{/number}","events_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/events","assignees_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/assignees{/user}","branches_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/branches{/branch}","tags_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/tags","blobs_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/refs{/sha}","trees_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/trees{/sha}","statuses_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/statuses/{sha}","languages_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/languages","stargazers_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/stargazers","contributors_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/contributors","subscribers_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/subscribers","subscription_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/subscription","commits_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/commits{/sha}","git_commits_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/commits{/sha}","comments_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/comments{/number}","issue_comment_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/comments{/number}","contents_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/contents/{+path}","compare_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/compare/{base}...{head}","merges_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/merges","archive_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/downloads","issues_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues{/number}","pulls_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls{/number}","milestones_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/milestones{/number}","notifications_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/labels{/name}","releases_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/releases{/id}","deployments_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/deployments","created_at":"2017-10-30T09:34:10Z","updated_at":"2017-10-30T09:34:10Z","pushed_at":"2018-12-10T10:53:11Z","git_url":"git://github.com/snyk-fixtures/maven-with-vulns.git","ssh_url":"git@github.com:snyk-fixtures/maven-with-vulns.git","clone_url":"https://github.com/snyk-fixtures/maven-with-vulns.git","svn_url":"https://github.com/snyk-fixtures/maven-with-vulns","homepage":null,"size":10,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":5,"mirror_url":null,"archived":false,"open_issues_count":28,"license":null,"forks":5,"open_issues":28,"watchers":0,"default_branch":"master"}},"base":{"label":"snyk-fixtures:master","ref":"master","sha":"6767ffa4ec65d3aa1581579459b35f57f4e9fac0","user":{"login":"snyk-fixtures","id":25479154,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI1NDc5MTU0","avatar_url":"https://avatars2.githubusercontent.com/u/25479154?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-fixtures","html_url":"https://github.com/snyk-fixtures","followers_url":"https://api.github.com/users/snyk-fixtures/followers","following_url":"https://api.github.com/users/snyk-fixtures/following{/other_user}","gists_url":"https://api.github.com/users/snyk-fixtures/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-fixtures/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-fixtures/subscriptions","organizations_url":"https://api.github.com/users/snyk-fixtures/orgs","repos_url":"https://api.github.com/users/snyk-fixtures/repos","events_url":"https://api.github.com/users/snyk-fixtures/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-fixtures/received_events","type":"Organization","site_admin":false},"repo":{"id":108829707,"node_id":"MDEwOlJlcG9zaXRvcnkxMDg4Mjk3MDc=","name":"maven-with-vulns","full_name":"snyk-fixtures/maven-with-vulns","private":false,"owner":{"login":"snyk-fixtures","id":25479154,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI1NDc5MTU0","avatar_url":"https://avatars2.githubusercontent.com/u/25479154?v=4","gravatar_id":"","url":"https://api.github.com/users/snyk-fixtures","html_url":"https://github.com/snyk-fixtures","followers_url":"https://api.github.com/users/snyk-fixtures/followers","following_url":"https://api.github.com/users/snyk-fixtures/following{/other_user}","gists_url":"https://api.github.com/users/snyk-fixtures/gists{/gist_id}","starred_url":"https://api.github.com/users/snyk-fixtures/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/snyk-fixtures/subscriptions","organizations_url":"https://api.github.com/users/snyk-fixtures/orgs","repos_url":"https://api.github.com/users/snyk-fixtures/repos","events_url":"https://api.github.com/users/snyk-fixtures/events{/privacy}","received_events_url":"https://api.github.com/users/snyk-fixtures/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/snyk-fixtures/maven-with-vulns","description":null,"fork":false,"url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns","forks_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/forks","keys_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/keys{/key_id}","collaborators_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/teams","hooks_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/hooks","issue_events_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/events{/number}","events_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/events","assignees_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/assignees{/user}","branches_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/branches{/branch}","tags_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/tags","blobs_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/refs{/sha}","trees_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/trees{/sha}","statuses_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/statuses/{sha}","languages_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/languages","stargazers_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/stargazers","contributors_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/contributors","subscribers_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/subscribers","subscription_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/subscription","commits_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/commits{/sha}","git_commits_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/git/commits{/sha}","comments_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/comments{/number}","issue_comment_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/comments{/number}","contents_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/contents/{+path}","compare_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/compare/{base}...{head}","merges_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/merges","archive_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/downloads","issues_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues{/number}","pulls_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls{/number}","milestones_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/milestones{/number}","notifications_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/labels{/name}","releases_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/releases{/id}","deployments_url":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/deployments","created_at":"2017-10-30T09:34:10Z","updated_at":"2017-10-30T09:34:10Z","pushed_at":"2018-12-10T10:53:11Z","git_url":"git://github.com/snyk-fixtures/maven-with-vulns.git","ssh_url":"git@github.com:snyk-fixtures/maven-with-vulns.git","clone_url":"https://github.com/snyk-fixtures/maven-with-vulns.git","svn_url":"https://github.com/snyk-fixtures/maven-with-vulns","homepage":null,"size":10,"stargazers_count":0,"watchers_count":0,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":5,"mirror_url":null,"archived":false,"open_issues_count":28,"license":null,"forks":5,"open_issues":28,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/54"},"html":{"href":"https://github.com/snyk-fixtures/maven-with-vulns/pull/54"},"issue":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/54"},"comments":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/issues/54/comments"},"review_comments":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/54/comments"},"review_comment":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/pulls/54/commits"},"statuses":{"href":"https://api.github.com/repos/snyk-fixtures/maven-with-vulns/statuses/85830a616af834b40599b70d8e4d59058f2ef24e"}},"author_association":"NONE","merged":false,"mergeable":true,"rebaseable":true,"mergeable_state":"clean","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":1,"deletions":1,"changed_files":1}}
{"actor":{"display_login":"darscan"}}