{
  "repository": "https://github.com/feast-dev/feast",
  "commit_source": "git_rev_parse",
  "commit_sha": "be1b52227e1ade9a3be9836391ade45eb1a26909",
  "submitted_target": {
    "target_kind": "git_commit",
    "commit_sha": "be1b52227e1ade9a3be9836391ade45eb1a26909",
    "version": null,
    "ref": null,
    "display": "feast vulnerable commit be1b52227e1ade9a3be9836391ade45eb1a26909"
  },
  "variant_target": {
    "target_kind": "git_commit",
    "commit_sha": "be1b52227e1ade9a3be9836391ade45eb1a26909",
    "version": null,
    "ref": null,
    "display": "feast vulnerable commit be1b52227e1ade9a3be9836391ade45eb1a26909 with Web UI /save-document alternate entrypoint"
  },
  "fixed_target": {
    "target_kind": "git_commit",
    "commit_sha": "4018e7b0c39825a5647fb17fc5607d72fb4bc0ce",
    "version": null,
    "ref": null,
    "display": "fixed commit 4018e7b0c39825a5647fb17fc5607d72fb4bc0ce, document endpoints removed"
  },
  "latest_observed_target": {
    "target_kind": "git_commit",
    "commit_sha": "f296d4ba14c5d512429219b2b7845673e0fe524d",
    "version": null,
    "ref": "origin/master",
    "display": "origin/master observed during variant run at f296d4ba14c5d512429219b2b7845673e0fe524d"
  },
  "notes": "Exact revisions were recorded by git rev-parse in bundle/logs/vuln_variant/fixed_version.txt and latest_version.txt. The confirmed alternate trigger exists on the vulnerable commit only; fixed and latest targets remove the Web UI /save-document endpoint."
}