{"action":"created","issue":{"url":"https://api.github.com/repos/grails/grails-core/issues/9113","labels_url":"https://api.github.com/repos/grails/grails-core/issues/9113/labels{/name}","comments_url":"https://api.github.com/repos/grails/grails-core/issues/9113/comments","events_url":"https://api.github.com/repos/grails/grails-core/issues/9113/events","html_url":"https://github.com/grails/grails-core/issues/9113","id":95658806,"number":9113,"title":" [CVE-2015-3253] Apache Groovy Zero-Day Vulnerability Disclosure","user":{"login":"biztalk","id":867048,"avatar_url":"https://avatars.githubusercontent.com/u/867048?v=3","gravatar_id":"","url":"https://api.github.com/users/biztalk","html_url":"https://github.com/biztalk","followers_url":"https://api.github.com/users/biztalk/followers","following_url":"https://api.github.com/users/biztalk/following{/other_user}","gists_url":"https://api.github.com/users/biztalk/gists{/gist_id}","starred_url":"https://api.github.com/users/biztalk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/biztalk/subscriptions","organizations_url":"https://api.github.com/users/biztalk/orgs","repos_url":"https://api.github.com/users/biztalk/repos","events_url":"https://api.github.com/users/biztalk/events{/privacy}","received_events_url":"https://api.github.com/users/biztalk/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/grails/grails-core/labels/Awaiting%20Feedback","name":"Awaiting Feedback","color":"d4c5f9"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-07-17T13:44:25Z","updated_at":"2015-08-27T21:16:54Z","closed_at":"2015-08-27T21:16:54Z","body":"There is a security vulnerability disclosure regarding Groovy 2.4.3 and below. Since all versions of Grails, including the latest Grails 3.0.3, are using Groovy version below 2.4.4. Should the Grails distribution provide patches for the groovy-all jars within the Grails /lib directory?\r\n\r\nHere is the text about the CVE: http://www.securityfocus.com/archive/1/536012/30/0/threaded"},"comment":{"url":"https://api.github.com/repos/grails/grails-core/issues/comments/135557021","html_url":"https://github.com/grails/grails-core/issues/9113#issuecomment-135557021","issue_url":"https://api.github.com/repos/grails/grails-core/issues/9113","id":135557021,"user":{"login":"graemerocher","id":66626,"avatar_url":"https://avatars.githubusercontent.com/u/66626?v=3","gravatar_id":"","url":"https://api.github.com/users/graemerocher","html_url":"https://github.com/graemerocher","followers_url":"https://api.github.com/users/graemerocher/followers","following_url":"https://api.github.com/users/graemerocher/following{/other_user}","gists_url":"https://api.github.com/users/graemerocher/gists{/gist_id}","starred_url":"https://api.github.com/users/graemerocher/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/graemerocher/subscriptions","organizations_url":"https://api.github.com/users/graemerocher/orgs","repos_url":"https://api.github.com/users/graemerocher/repos","events_url":"https://api.github.com/users/graemerocher/events{/privacy}","received_events_url":"https://api.github.com/users/graemerocher/received_events","type":"User","site_admin":false},"created_at":"2015-08-27T21:16:54Z","updated_at":"2015-08-27T21:16:54Z","body":"Closing this since this bug doesn't impact Grails"}}