{"action":"created","issue":{"url":"https://api.github.com/repos/chef/supermarket/issues/1042","labels_url":"https://api.github.com/repos/chef/supermarket/issues/1042/labels{/name}","comments_url":"https://api.github.com/repos/chef/supermarket/issues/1042/comments","events_url":"https://api.github.com/repos/chef/supermarket/issues/1042/events","html_url":"https://github.com/chef/supermarket/pull/1042","id":74487334,"number":1042,"title":"Update insecure gems in Gemfile.lock","user":{"login":"irvingpop","id":1616328,"avatar_url":"https://avatars.githubusercontent.com/u/1616328?v=3","gravatar_id":"","url":"https://api.github.com/users/irvingpop","html_url":"https://github.com/irvingpop","followers_url":"https://api.github.com/users/irvingpop/followers","following_url":"https://api.github.com/users/irvingpop/following{/other_user}","gists_url":"https://api.github.com/users/irvingpop/gists{/gist_id}","starred_url":"https://api.github.com/users/irvingpop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/irvingpop/subscriptions","organizations_url":"https://api.github.com/users/irvingpop/orgs","repos_url":"https://api.github.com/users/irvingpop/repos","events_url":"https://api.github.com/users/irvingpop/events{/privacy}","received_events_url":"https://api.github.com/users/irvingpop/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/chef/supermarket/labels/in%20progress","name":"in progress","color":"ededed"},{"url":"https://api.github.com/repos/chef/supermarket/labels/Signed%20CLA","name":"Signed CLA","color":"ededed"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-05-08T20:36:16Z","updated_at":"2015-05-11T16:34:11Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/chef/supermarket/pulls/1042","html_url":"https://github.com/chef/supermarket/pull/1042","diff_url":"https://github.com/chef/supermarket/pull/1042.diff","patch_url":"https://github.com/chef/supermarket/pull/1042.patch"},"body":"I ran the rubygem `bundle-audit` on Supermarket, and here's what it returned:\r\n\r\n```\r\nName: redcarpet\r\nVersion: 3.1.2\r\nAdvisory: OSVDB-120415\r\nCriticality: Unknown\r\nURL: http://danlec.com/blog/bug-in-sundown-and-redcarpet\r\nTitle: redcarpet Gem for Ruby markdown.c parse_inline() Function XSS\r\nSolution: upgrade to >= 3.2.3\r\n\r\nName: rest-client\r\nVersion: 1.6.7\r\nAdvisory: CVE-2015-1820\r\nCriticality: Unknown\r\nURL: https://github.com/rest-client/rest-client/issues/369\r\nTitle: rubygem-rest-client: session fixation vulnerability via Set-Cookie headers in 30x redirection responses\r\nSolution: upgrade to >= 1.8.0\r\n\r\nName: rest-client\r\nVersion: 1.6.7\r\nAdvisory: OSVDB-117461\r\nCriticality: Unknown\r\nURL: http://www.osvdb.org/show/osvdb/117461\r\nTitle: Rest-Client Gem for Ruby logs password information in plaintext\r\nSolution: upgrade to >= 1.7.3\r\n\r\nName: sentry-raven\r\nVersion: 0.8.0\r\nAdvisory: OSVDB-115654\r\nCriticality: Medium\r\nURL: http://osvdb.org/show/osvdb/115654\r\nTitle: sentry-raven Gem for Ruby contains a flaw that can result in a denial of service\r\nSolution: upgrade to >= 0.12.2\r\n\r\nUnpatched versions found!\r\n```\r\n\r\nso here's a refreshed Gemfile.lock that updates these insecure gems."},"comment":{"url":"https://api.github.com/repos/chef/supermarket/issues/comments/100972914","html_url":"https://github.com/chef/supermarket/pull/1042#issuecomment-100972914","issue_url":"https://api.github.com/repos/chef/supermarket/issues/1042","id":100972914,"user":{"login":"irvingpop","id":1616328,"avatar_url":"https://avatars.githubusercontent.com/u/1616328?v=3","gravatar_id":"","url":"https://api.github.com/users/irvingpop","html_url":"https://github.com/irvingpop","followers_url":"https://api.github.com/users/irvingpop/followers","following_url":"https://api.github.com/users/irvingpop/following{/other_user}","gists_url":"https://api.github.com/users/irvingpop/gists{/gist_id}","starred_url":"https://api.github.com/users/irvingpop/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/irvingpop/subscriptions","organizations_url":"https://api.github.com/users/irvingpop/orgs","repos_url":"https://api.github.com/users/irvingpop/repos","events_url":"https://api.github.com/users/irvingpop/events{/privacy}","received_events_url":"https://api.github.com/users/irvingpop/received_events","type":"User","site_admin":false},"created_at":"2015-05-11T16:34:11Z","updated_at":"2015-05-11T16:34:11Z","body":"thanks @nellshamrell - please feel free to push to my branch and let me know if there's anything I can do to help :)"}}