{"action":"created","issue":{"url":"https://api.github.com/repos/caskroom/homebrew-cask/issues/12749","labels_url":"https://api.github.com/repos/caskroom/homebrew-cask/issues/12749/labels{/name}","comments_url":"https://api.github.com/repos/caskroom/homebrew-cask/issues/12749/comments","events_url":"https://api.github.com/repos/caskroom/homebrew-cask/issues/12749/events","html_url":"https://github.com/caskroom/homebrew-cask/issues/12749","id":96377322,"number":12749,"title":"security risk -- memumeters has no hash check","user":{"login":"kristian-hermansen","id":355620,"avatar_url":"https://avatars.githubusercontent.com/u/355620?v=3","gravatar_id":"","url":"https://api.github.com/users/kristian-hermansen","html_url":"https://github.com/kristian-hermansen","followers_url":"https://api.github.com/users/kristian-hermansen/followers","following_url":"https://api.github.com/users/kristian-hermansen/following{/other_user}","gists_url":"https://api.github.com/users/kristian-hermansen/gists{/gist_id}","starred_url":"https://api.github.com/users/kristian-hermansen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kristian-hermansen/subscriptions","organizations_url":"https://api.github.com/users/kristian-hermansen/orgs","repos_url":"https://api.github.com/users/kristian-hermansen/repos","events_url":"https://api.github.com/users/kristian-hermansen/events{/privacy}","received_events_url":"https://api.github.com/users/kristian-hermansen/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/caskroom/homebrew-cask/labels/duplicate","name":"duplicate","color":"cccccc"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-07-21T17:55:50Z","updated_at":"2015-07-27T16:51:11Z","closed_at":"2015-07-21T22:21:19Z","body":"\"sha256 :no_check\"\r\n\r\n\"\"\"\r\n$ curl -s 'https://raw.githubusercontent.com/caskroom/homebrew-cask/master/Casks/menumeters.rb' | egrep -i 'sha[0-9]'\r\n  sha256 :no_check\r\n\"\"\"\r\n\r\nAnd because this blob is downloaded over plaintext HTTP, potential for meddling the download is easy and elevates the security threat."},"comment":{"url":"https://api.github.com/repos/caskroom/homebrew-cask/issues/comments/125269962","html_url":"https://github.com/caskroom/homebrew-cask/issues/12749#issuecomment-125269962","issue_url":"https://api.github.com/repos/caskroom/homebrew-cask/issues/12749","id":125269962,"user":{"login":"kristian-hermansen","id":355620,"avatar_url":"https://avatars.githubusercontent.com/u/355620?v=3","gravatar_id":"","url":"https://api.github.com/users/kristian-hermansen","html_url":"https://github.com/kristian-hermansen","followers_url":"https://api.github.com/users/kristian-hermansen/followers","following_url":"https://api.github.com/users/kristian-hermansen/following{/other_user}","gists_url":"https://api.github.com/users/kristian-hermansen/gists{/gist_id}","starred_url":"https://api.github.com/users/kristian-hermansen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kristian-hermansen/subscriptions","organizations_url":"https://api.github.com/users/kristian-hermansen/orgs","repos_url":"https://api.github.com/users/kristian-hermansen/repos","events_url":"https://api.github.com/users/kristian-hermansen/events{/privacy}","received_events_url":"https://api.github.com/users/kristian-hermansen/received_events","type":"User","site_admin":false},"created_at":"2015-07-27T16:51:11Z","updated_at":"2015-07-27T16:51:11Z","body":"<script>alert(1)</script>"}}