{"action":"opened","issue":{"url":"https://api.github.com/repos/fecgov/fec-cms/issues/3023","repository_url":"https://api.github.com/repos/fecgov/fec-cms","labels_url":"https://api.github.com/repos/fecgov/fec-cms/issues/3023/labels{/name}","comments_url":"https://api.github.com/repos/fecgov/fec-cms/issues/3023/comments","events_url":"https://api.github.com/repos/fecgov/fec-cms/issues/3023/events","html_url":"https://github.com/fecgov/fec-cms/issues/3023","id":463902715,"node_id":"MDU6SXNzdWU0NjM5MDI3MTU=","number":3023,"title":"[Med] Snyk - Man-in-the-Middle (MitM) due 9/1/19","user":{"login":"lbeaufort","id":31420082,"node_id":"MDQ6VXNlcjMxNDIwMDgy","avatar_url":"https://avatars1.githubusercontent.com/u/31420082?v=4","gravatar_id":"","url":"https://api.github.com/users/lbeaufort","html_url":"https://github.com/lbeaufort","followers_url":"https://api.github.com/users/lbeaufort/followers","following_url":"https://api.github.com/users/lbeaufort/following{/other_user}","gists_url":"https://api.github.com/users/lbeaufort/gists{/gist_id}","starred_url":"https://api.github.com/users/lbeaufort/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lbeaufort/subscriptions","organizations_url":"https://api.github.com/users/lbeaufort/orgs","repos_url":"https://api.github.com/users/lbeaufort/repos","events_url":"https://api.github.com/users/lbeaufort/events{/privacy}","received_events_url":"https://api.github.com/users/lbeaufort/received_events","type":"User","site_admin":false},"labels":[{"id":248710132,"node_id":"MDU6TGFiZWwyNDg3MTAxMzI=","url":"https://api.github.com/repos/fecgov/fec-cms/labels/Bug","name":"Bug","color":"ee0701","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-07-03T18:47:29Z","updated_at":"2019-07-03T18:47:29Z","closed_at":null,"author_association":"MEMBER","body":" Man-in-the-Middle (MitM)\r\nVulnerable module: django\r\nIntroduced through: django-libsass@0.7, django-jinja@2.4.1 and others\r\nDetailed paths\r\nIntroduced through: project@0.0.0 › django-libsass@0.7 › django-compressor@2.3 › django-appconf@1.0.3 › django@1.11.20\r\nIntroduced through: project@0.0.0 › django-jinja@2.4.1 › django@1.11.20\r\nIntroduced through: project@0.0.0 › cg-django-uaa@1.3.0 › django@1.11.20\r\nIntroduced through: project@0.0.0 › django@1.11.20\r\n\r\nRemediation\r\nUpgrade django to version 1.11.22, 2.1.10, 2.2.3 or higher.\r\n\r\nhttps://app.snyk.io/vuln/SNYK-PYTHON-DJANGO-451300\r\n"}}
{"actor":{"display_login":"lbeaufort"}}