{"push_id":3177858559,"size":1,"distinct_size":1,"ref":"refs/heads/RELEASE-0.2.0","head":"b61220dc68e670515ca6b9cd9d2d6137be9cfdbc","before":"18f05cce08f53f0fe9dd47df322a9c615b7e9b98","commits":[{"sha":"b61220dc68e670515ca6b9cd9d2d6137be9cfdbc","author":{"name":"root","email":"dc76e9f0c0006e8f919e0c515c66dbba3982f785@stemq.io"},"message":"Updated Django from 2.1 to 2.1.2 because of a security alert:\nCVE-2018-16984 More information\nhigh severity\nVulnerable versions: >= 2.1, < 2.1.2\nPatched version: 2.1.2\nAn issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts. The read-only password widget used by the Django Admin to display an obfuscated password hash was bypassed if a user has only the \"view\" permission (new in Django 2.1), resulting in display of the entire password hash to those users. This may result in a vulnerability for sites with legacy user accounts using insecure hashes.","distinct":true,"url":"https://api.github.com/repos/irelandscape/quearn-server/commits/b61220dc68e670515ca6b9cd9d2d6137be9cfdbc"}]}
{"actor":{"display_login":"irelandscape"}}