{
  "repository": "https://github.com/pinpoint-apm/pinpoint.git",
  "commit_source": "git_rev_parse",
  "commit_sha": "f683a24b4fb10c6a850a10476ee2502129bb03e2",
  "submitted_target": {
    "target_kind": "git_tag",
    "version": "3.1.0",
    "ref": "v3.1.0",
    "display": "pinpoint v3.1.0 (e3940e516c)"
  },
  "variant_target": {
    "target_kind": "git_commit",
    "commit_sha": "f683a24b4fb10c6a850a10476ee2502129bb03e2",
    "version": "master",
    "ref": "f683a24b4f",
    "display": "pinpoint master f683a24b4f [#13857] Add webhook SSRF validation"
  },
  "notes": "The exact fixed commit is f683a24b4f. The latest master at analysis time was f59a5468ae141958a0bb9400da3e79ac0ad73dc2, which contains f683a24b4f. No v3.1.1 release tag was available, so the fix was tested at the source level using the patched WebhookUrlValidator and WebhookDnsResolver classes extracted from this commit."
}