{"action":"created","issue":{"url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/issues/1258","repository_url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager","labels_url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/issues/1258/labels{/name}","comments_url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/issues/1258/comments","events_url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/issues/1258/events","html_url":"https://github.com/TeamAmaze/AmazeFileManager/pull/1258","id":327537020,"node_id":"MDExOlB1bGxSZXF1ZXN0MTkxMzA3MTM2","number":1258,"title":"Fix possibility of archive entry being extracted to outside extract destination","user":{"login":"TranceLove","id":251819,"node_id":"MDQ6VXNlcjI1MTgxOQ==","avatar_url":"https://avatars0.githubusercontent.com/u/251819?v=4","gravatar_id":"","url":"https://api.github.com/users/TranceLove","html_url":"https://github.com/TranceLove","followers_url":"https://api.github.com/users/TranceLove/followers","following_url":"https://api.github.com/users/TranceLove/following{/other_user}","gists_url":"https://api.github.com/users/TranceLove/gists{/gist_id}","starred_url":"https://api.github.com/users/TranceLove/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TranceLove/subscriptions","organizations_url":"https://api.github.com/users/TranceLove/orgs","repos_url":"https://api.github.com/users/TranceLove/repos","events_url":"https://api.github.com/users/TranceLove/events{/privacy}","received_events_url":"https://api.github.com/users/TranceLove/received_events","type":"User","site_admin":false},"labels":[{"id":677213950,"node_id":"MDU6TGFiZWw2NzcyMTM5NTA=","url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/labels/high","name":"high","color":"e99695","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/milestones/1","html_url":"https://github.com/TeamAmaze/AmazeFileManager/milestone/1","labels_url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/milestones/1/labels","id":2863757,"node_id":"MDk6TWlsZXN0b25lMjg2Mzc1Nw==","number":1,"title":"v3.3.0","description":"We release this weekend. Please fix any major bugs/pending PRs by the time.\r\nAny remaining assignments will move on to milestone v3.4.0.","creator":{"login":"EmmanuelMess","id":10991116,"node_id":"MDQ6VXNlcjEwOTkxMTE2","avatar_url":"https://avatars1.githubusercontent.com/u/10991116?v=4","gravatar_id":"","url":"https://api.github.com/users/EmmanuelMess","html_url":"https://github.com/EmmanuelMess","followers_url":"https://api.github.com/users/EmmanuelMess/followers","following_url":"https://api.github.com/users/EmmanuelMess/following{/other_user}","gists_url":"https://api.github.com/users/EmmanuelMess/gists{/gist_id}","starred_url":"https://api.github.com/users/EmmanuelMess/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EmmanuelMess/subscriptions","organizations_url":"https://api.github.com/users/EmmanuelMess/orgs","repos_url":"https://api.github.com/users/EmmanuelMess/repos","events_url":"https://api.github.com/users/EmmanuelMess/events{/privacy}","received_events_url":"https://api.github.com/users/EmmanuelMess/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":44,"state":"open","created_at":"2017-10-25T02:41:00Z","updated_at":"2018-06-17T17:46:47Z","due_on":"2018-06-17T07:00:00Z","closed_at":null},"comments":10,"created_at":"2018-05-30T01:02:20Z","updated_at":"2018-06-17T17:48:28Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/pulls/1258","html_url":"https://github.com/TeamAmaze/AmazeFileManager/pull/1258","diff_url":"https://github.com/TeamAmaze/AmazeFileManager/pull/1258.diff","patch_url":"https://github.com/TeamAmaze/AmazeFileManager/pull/1258.patch"},"body":"Details about the vulnerability: [here](https://snyk.io/research/zip-slip-vulnerability); fix for 3.2.1 is #1260 which had been released to Google Play Store as version 3.2.2.\r\n\r\nAlso brought the test suite from e0d40191e in #1222 for behavioural verification.\r\n\r\nIOException will be thrown on erroneous archive entry, causing app to pop up an \"Error\" Toast.\r\n\r\nSafe to cherry-pick into `release-3.3.0`.\r\n\r\nOur sincere thanks to folks at [snyk.io](https://snyk.io) who tipped us about the vulnerability."},"comment":{"url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/issues/comments/397894873","html_url":"https://github.com/TeamAmaze/AmazeFileManager/pull/1258#issuecomment-397894873","issue_url":"https://api.github.com/repos/TeamAmaze/AmazeFileManager/issues/1258","id":397894873,"node_id":"MDEyOklzc3VlQ29tbWVudDM5Nzg5NDg3Mw==","user":{"login":"EmmanuelMess","id":10991116,"node_id":"MDQ6VXNlcjEwOTkxMTE2","avatar_url":"https://avatars1.githubusercontent.com/u/10991116?v=4","gravatar_id":"","url":"https://api.github.com/users/EmmanuelMess","html_url":"https://github.com/EmmanuelMess","followers_url":"https://api.github.com/users/EmmanuelMess/followers","following_url":"https://api.github.com/users/EmmanuelMess/following{/other_user}","gists_url":"https://api.github.com/users/EmmanuelMess/gists{/gist_id}","starred_url":"https://api.github.com/users/EmmanuelMess/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EmmanuelMess/subscriptions","organizations_url":"https://api.github.com/users/EmmanuelMess/orgs","repos_url":"https://api.github.com/users/EmmanuelMess/repos","events_url":"https://api.github.com/users/EmmanuelMess/events{/privacy}","received_events_url":"https://api.github.com/users/EmmanuelMess/received_events","type":"User","site_admin":false},"created_at":"2018-06-17T17:48:28Z","updated_at":"2018-06-17T17:48:28Z","author_association":"MEMBER","body":"@VishalNehra "}}
{"actor":{"display_login":"EmmanuelMess"}}