{"action":"created","issue":{"url":"https://api.github.com/repos/yegor256/s3auth/issues/326","repository_url":"https://api.github.com/repos/yegor256/s3auth","labels_url":"https://api.github.com/repos/yegor256/s3auth/issues/326/labels{/name}","comments_url":"https://api.github.com/repos/yegor256/s3auth/issues/326/comments","events_url":"https://api.github.com/repos/yegor256/s3auth/issues/326/events","html_url":"https://github.com/yegor256/s3auth/pull/326","id":147310014,"number":326,"title":"Upgrade Apache Commons Collections to v4.1","user":{"login":"jart","id":49262,"avatar_url":"https://avatars2.githubusercontent.com/u/49262?v=3","gravatar_id":"","url":"https://api.github.com/users/jart","html_url":"https://github.com/jart","followers_url":"https://api.github.com/users/jart/followers","following_url":"https://api.github.com/users/jart/following{/other_user}","gists_url":"https://api.github.com/users/jart/gists{/gist_id}","starred_url":"https://api.github.com/users/jart/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jart/subscriptions","organizations_url":"https://api.github.com/users/jart/orgs","repos_url":"https://api.github.com/users/jart/repos","events_url":"https://api.github.com/users/jart/events{/privacy}","received_events_url":"https://api.github.com/users/jart/received_events","type":"User","site_admin":false},"labels":[{"id":273416693,"url":"https://api.github.com/repos/yegor256/s3auth/labels/15%20mins","name":"15 mins","color":"eb6421","default":false},{"id":76638521,"url":"https://api.github.com/repos/yegor256/s3auth/labels/@yegor256","name":"@yegor256","color":"009801","default":false},{"id":273416657,"url":"https://api.github.com/repos/yegor256/s3auth/labels/CR","name":"CR","color":"bfd4f3","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2016-04-11T03:59:47Z","updated_at":"2017-05-12T08:05:52Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/yegor256/s3auth/pulls/326","html_url":"https://github.com/yegor256/s3auth/pull/326","diff_url":"https://github.com/yegor256/s3auth/pull/326.diff","patch_url":"https://github.com/yegor256/s3auth/pull/326.patch"},"body":"Version 4.0 has a CVSS 10.0 vulnerability. That's the worst kind of\nvulnerability that exists. By merely existing on the classpath, this\nlibrary causes the Java serialization parser for the entire JVM process\nto go from being a state machine to a turing machine. A turing machine\nwith an exec() function!\n\nhttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-8103\nhttps://commons.apache.org/proper/commons-collections/security-reports.html\nhttp://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/\n"},"comment":{"url":"https://api.github.com/repos/yegor256/s3auth/issues/comments/301011792","html_url":"https://github.com/yegor256/s3auth/pull/326#issuecomment-301011792","issue_url":"https://api.github.com/repos/yegor256/s3auth/issues/326","id":301011792,"user":{"login":"yegor256","id":526301,"avatar_url":"https://avatars0.githubusercontent.com/u/526301?v=3","gravatar_id":"","url":"https://api.github.com/users/yegor256","html_url":"https://github.com/yegor256","followers_url":"https://api.github.com/users/yegor256/followers","following_url":"https://api.github.com/users/yegor256/following{/other_user}","gists_url":"https://api.github.com/users/yegor256/gists{/gist_id}","starred_url":"https://api.github.com/users/yegor256/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yegor256/subscriptions","organizations_url":"https://api.github.com/users/yegor256/orgs","repos_url":"https://api.github.com/users/yegor256/repos","events_url":"https://api.github.com/users/yegor256/events{/privacy}","received_events_url":"https://api.github.com/users/yegor256/received_events","type":"User","site_admin":false},"created_at":"2017-05-12T08:05:52Z","updated_at":"2017-05-12T08:05:52Z","body":"@rultor try to merge"}}
{"actor":{"display_login":"yegor256"}}