{"action":"opened","issue":{"url":"https://api.github.com/repos/kjohnston/pgbackups-archive/issues/49","labels_url":"https://api.github.com/repos/kjohnston/pgbackups-archive/issues/49/labels{/name}","comments_url":"https://api.github.com/repos/kjohnston/pgbackups-archive/issues/49/comments","events_url":"https://api.github.com/repos/kjohnston/pgbackups-archive/issues/49/events","html_url":"https://github.com/kjohnston/pgbackups-archive/issues/49","id":65576848,"number":49,"title":"Bump or remove direct heroku gem dependency","user":{"login":"mikeatlas","id":12704,"avatar_url":"https://avatars.githubusercontent.com/u/12704?v=3","gravatar_id":"","url":"https://api.github.com/users/mikeatlas","html_url":"https://github.com/mikeatlas","followers_url":"https://api.github.com/users/mikeatlas/followers","following_url":"https://api.github.com/users/mikeatlas/following{/other_user}","gists_url":"https://api.github.com/users/mikeatlas/gists{/gist_id}","starred_url":"https://api.github.com/users/mikeatlas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mikeatlas/subscriptions","organizations_url":"https://api.github.com/users/mikeatlas/orgs","repos_url":"https://api.github.com/users/mikeatlas/repos","events_url":"https://api.github.com/users/mikeatlas/events{/privacy}","received_events_url":"https://api.github.com/users/mikeatlas/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-01T00:47:09Z","updated_at":"2015-04-01T00:47:09Z","closed_at":null,"body":"Per the latest double indirect CVE warnings, your gem also depends on a vulnerable `rest-client` version.\r\n\r\nSee https://github.com/heroku/heroku/pull/1470\r\n\r\nYou may want to wait and see what they do, or consider wrapping the CLI app commands instead maybe (ick, but...)"}}