payload: {"action":"opened","issue":{"url":"https://api.github.com/repos/ekirmayer/Library/issues/126","repository_url":"https://api.github.com/repos/ekirmayer/Library","labels_url":"https://api.github.com/repos/ekirmayer/Library/issues/126/labels{/name}","comments_url":"https://api.github.com/repos/ekirmayer/Library/issues/126/comments","events_url":"https://api.github.com/repos/ekirmayer/Library/issues/126/events","html_url":"https://github.com/ekirmayer/Library/issues/126","id":413201645,"node_id":"MDU6SXNzdWU0MTMyMDE2NDU=","number":126,"title":"WS-2019-0017 Medium Severity Vulnerability detected by WhiteSource","user":{"login":"whitesource-bolt-for-github[bot]","id":42819689,"node_id":"MDM6Qm90NDI4MTk2ODk=","avatar_url":"https://avatars2.githubusercontent.com/in/16809?v=4","gravatar_id":"","url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D","html_url":"https://github.com/apps/whitesource-bolt-for-github","followers_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/followers","following_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/repos","events_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/whitesource-bolt-for-github%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-02-22T01:34:10Z","updated_at":"2019-02-22T01:34:10Z","closed_at":null,"author_association":"NONE","body":"## WS-2019-0017 - Medium Severity Vulnerability\n<details><summary><img src='https://www.whitesourcesoftware.com/wp-content/uploads/2018/10/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>clean-css-3.4.28.tgz</b></p></summary>\n\n<p>A well-tested CSS minifier</p>\n<p>path: /tmp/git/Library/node_modules/jade/node_modules/clean-css/package.json</p>\n<p>\n\n<p>Library home page: <a href=https://registry.npmjs.org/clean-css/-/clean-css-3.4.28.tgz>https://registry.npmjs.org/clean-css/-/clean-css-3.4.28.tgz</a></p>\n\nDependency Hierarchy:\n  - jade-1.11.0.tgz (Root Library)\n    - :x: **clean-css-3.4.28.tgz** (Vulnerable Library)\n</p>\n</details>\n<p></p>\n<details><summary><img src='https://www.whitesourcesoftware.com/wp-content/uploads/2018/10/medium_vul.png' width=19 height=20> Vulnerability Details</summary>\n<p>  \n  \nVersion of clean-css prior to 4.1.11 are vulnerable to Regular Expression Denial of Service (ReDoS). Untrusted input may cause catastrophic backtracking while matching regular expressions. This can cause the application to be unresponsive leading to Denial of Service.\n\n<p>Publish Date: 2019-02-21\n<p>URL: <a href=https://github.com/jakubpawlowicz/clean-css/commit/2929bafbf8cdf7dccb24e0949c70833764fa87e3>WS-2019-0017</a></p>\n</p>\n</details>\n<p></p>\n<details><summary><img src='https://www.whitesourcesoftware.com/wp-content/uploads/2018/10/cvss3.png' width=19 height=20> CVSS 2 Score Details (<b>5.0</b>)</summary>\n<p>\n\nBase Score Metrics not available</p>\n\n</p>\n</details>\n<p></p>\n<details><summary><img src='https://www.whitesourcesoftware.com/wp-content/uploads/2018/10/suggested_fix.png' width=19 height=20> Suggested Fix</summary>\n<p>\n\n<p>Type: Upgrade version</p>\n<p>Origin: <a href=\"https://www.npmjs.com/advisories/785\">https://www.npmjs.com/advisories/785</a></p>\n<p>Release Date: 2019-02-21</p>\n<p>Fix Resolution: v4.1.11</p>\n\n</p>\n</details>\n<p></p>\n\n***\nStep up your Open Source Security Game with WhiteSource [here](https://www.whitesourcesoftware.com/full_solution_bolt_github)"}}
other: {"actor":{"display_login":"whitesource-bolt-for-github"}}