)]}'
{
  "commit": "1ec9fc1a13842a90f1087b90bc039bbaa4007bbb",
  "tree": "b3a89c3a7c8a90357e04e995e609fa0273f4a94a",
  "parents": [
    "1cc2776a0b654c01c431639926ee090310dd12ae"
  ],
  "author": {
    "name": "Kent \u0027picat\u0027 Gruber",
    "email": "kent@hashicorp.com",
    "time": "Mon Nov 09 15:53:53 2020 -0500"
  },
  "committer": {
    "name": "Katy Moe",
    "email": "katy@katy.moe",
    "time": "Fri Nov 27 17:41:13 2020 +0000"
  },
  "message": "Bump go-getter to v1.5.0\n\ngithub.com/ulikunitz/xz@0.5.5 used by github.com/hashicorp/go-getter@1.4.0 contains a DoS where it is possible to create an infinite read loop due to the usage of the ReadUvarint and ReadVarint function when encoding/binary via invalid inputs.\n\nhttps://github.com/hashicorp/go-getter/pull/278\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f7aa87211f6788f000e767d6c4de6fbfa3229b77",
      "old_mode": 33188,
      "old_path": "go.mod",
      "new_id": "542b38ea3e150e644fe6d02e9a6a30733bb5227b",
      "new_mode": 33188,
      "new_path": "go.mod"
    },
    {
      "type": "modify",
      "old_id": "adb1e49f3ac6e78d6e7f70010f679879f7011328",
      "old_mode": 33188,
      "old_path": "go.sum",
      "new_id": "2b5efa2bec3b288af41a87f43eeba5c1fa1ce88e",
      "new_mode": 33188,
      "new_path": "go.sum"
    }
  ]
}
