{
  "commit_sha": "b3bd29d15819cbece45c58e6268ddd0614e387d6",
  "commit_source": "git_rev_parse",
  "notes": "Runtime matrix in reproduction_steps.sh tested the fixed release commit exactly. Latest/default source was inspected at origin/master 11c4e3a2596c58f2381bda4c6bbc319a4430b097 and retained the same raw public-prefix check.",
  "repository": "https://github.com/horilla/horilla-hr.git",
  "submitted_target": {
    "commit_sha": "61bd5173220d19925ad8220db9152a75c881ea73",
    "display": "Horilla HRMS 1.5.0 (submitted vulnerable target)",
    "ref": "1.5.0",
    "target_kind": "git_tag",
    "version": "1.5.0"
  },
  "variant_target": {
    "commit_sha": "b3bd29d15819cbece45c58e6268ddd0614e387d6",
    "display": "Horilla HRMS 1.6.0 fixed release (bypass target)",
    "ref": "1.6.0",
    "target_kind": "git_tag",
    "version": "1.6.0"
  }
}