{"id":106404,"date":"2023-01-19T06:48:10","date_gmt":"2023-01-19T04:48:10","guid":{"rendered":"https:\/\/prohoster.info\/?p=106404"},"modified":"2023-01-19T14:02:40","modified_gmt":"2023-01-19T12:02:40","slug":"dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda","title":{"rendered":"Dve zranite\u013enosti v Gite, ktor\u00e9 m\u00f4\u017eu vies\u0165 k vzdialen\u00e9mu vykonaniu k\u00f3du.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Bolestn\u00e9 opravy vydan\u00fdch verzi\u00ed distribu\u010dn\u00e9ho syst\u00e9mu spr\u00e1vy zdrojov\u00fdch k\u00f3dov Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 a 2.30.7, v ktor\u00fdch boli odstr\u00e1nen\u00e9 dve zranite\u013enosti umo\u017e\u0148uj\u00face vykonanie vlastn\u00e9ho k\u00f3du na syst\u00e9me pou\u017e\u00edvate\u013ea pri pou\u017eit\u00ed pr\u00edkazu &#171;git archive&#187; a pri pr\u00e1ci s ned\u00f4veryhodn\u00fdmi extern\u00fdmi repozit\u00e1rmi. Zranite\u013enosti s\u00fa sp\u00f4soben\u00e9 chybami v k\u00f3dovan\u00ed form\u00e1tovania commitov a parsovania s\u00faboru &#171;.gitattributes&#187;, ktor\u00e9 pri spracovan\u00ed extern\u00fdch repozit\u00e1rov m\u00f4\u017eu vies\u0165 k z\u00e1pisu do pam\u00e4\u0165ovej oblasti mimo hromady a \u010d\u00edtaniu n\u00e1hodn\u00fdch \u00fadajov z pam\u00e4te.       <\/p>\n<p>Obe zranite\u013enosti boli odhalen\u00e9 po\u010das auditu bezpe\u010dnosti k\u00f3du Git, ktor\u00fd vykonala spolo\u010dnos\u0165 X41 na objedn\u00e1vku fondu OSTIF (Open Source Technology Improvement Fund), zalo\u017een\u00e9ho na posilnenie bezpe\u010dnosti otvoren\u00fdch projektov. Okrem dvoch kritick\u00fdch probl\u00e9mov, o ktor\u00fdch sa hovor\u00ed ni\u017e\u0161ie, bol po\u010das auditu odhalen\u00fd aj jeden nebezpe\u010dn\u00fd zranite\u013enos\u0165, jedna zranite\u013enos\u0165 strednej \u00farovne a \u0161tyri nebezpe\u010dn\u00e9 probl\u00e9my. Bolo poskytnut\u00fdch aj 27 odpor\u00fa\u010dan\u00ed na zlep\u0161enie bezpe\u010dnosti k\u00f3du.    <\/p>\n<ul>\n<li class=\"l\"> CVE-2022-41903: prete\u010denie cel\u00e9ho \u010d\u00edsla v k\u00f3de form\u00e1tovania inform\u00e1ci\u00ed o commitoch, ktor\u00e9 nast\u00e1va pri spracovan\u00ed ve\u013ek\u00fdch hodn\u00f4t posunu v oper\u00e1toroch doplnenia, ako s\u00fa &#171;%&lt;(&#171;, &#171;%&lt;|(&#171;, &#171;%&gt;(&#171;, &#171;%&gt;&gt;(&#187; a &#171;%&gt;&lt;()&#187;. Prete\u010denie cel\u00e9ho \u010d\u00edsla sa vyskytuje vo funkcii format_and_pad_commit() kv\u00f4li pou\u017eitiu typu int pre premenn\u00fa size_t, ktor\u00e1 je zapojen\u00e1 do ur\u010denia ve\u013ekosti bloku kop\u00edrovan\u00e9ho pomocou memcpy().\n<p>Zranite\u013enos\u0165 sa prejavuje ako pri priamych volaniach so \u0161peci\u00e1lne upraven\u00fdmi form\u00e1tovac\u00edmi parametrami (napr\u00edklad pri spusten\u00ed &#171;git log &#8212;format=&#8230;&#187;), tak aj pri nepriamom pou\u017eit\u00ed form\u00e1tovania po\u010das vykon\u00e1vania pr\u00edkazu &#171;git archive&#187; v repozit\u00e1ri kontrolovanom \u00fato\u010dn\u00edkom. V druhom pr\u00edpade sa form\u00e1tovacie modifik\u00e1tory ur\u010duj\u00fa cez parameter export-subst v s\u00fabore &#171;.gitattributes&#187;, ktor\u00fd m\u00f4\u017ee by\u0165 umiestnen\u00fd \u00fato\u010dn\u00edkom vo svojom repozit\u00e1ri. Probl\u00e9m m\u00f4\u017ee by\u0165 vyu\u017eit\u00fd na \u010d\u00edtanie a z\u00e1pis do \u013eubovo\u013en\u00fdch oblast\u00ed v hromade a vies\u0165 k vykonaniu k\u00f3du \u00fato\u010dn\u00edka pri pr\u00e1ci s neoveren\u00fdmi repozit\u00e1rmi.    <\/p>\n<li class=\"l\"> CVE-2022-23521: prete\u010denia cel\u00fdch \u010d\u00edsel pri parsovan\u00ed obsahu s\u00faborov &#171;.gitattributes&#187; v repozit\u00e1ri, ktor\u00e9 sa prejavuj\u00fa pri spracovan\u00ed ve\u013emi ve\u013ek\u00e9ho po\u010dtu \u0161abl\u00f3n s\u00faborov\u00fdch ciest alebo ve\u013ek\u00e9ho po\u010dtu atrib\u00fatov s jednou \u0161abl\u00f3nou, ako aj pri parsovan\u00ed ve\u013emi ve\u013ek\u00fdch mien atrib\u00fatov. Probl\u00e9m m\u00f4\u017ee by\u0165 vyu\u017eit\u00fd na \u010d\u00edtanie a z\u00e1pis do \u013eubovo\u013en\u00fdch oblast\u00ed v hromade a vies\u0165 k vykonaniu k\u00f3du \u00fato\u010dn\u00edka pri pr\u00e1ci s neoveren\u00fdm repozit\u00e1rom, v ktorom \u00fato\u010dn\u00edk m\u00f4\u017ee umiestni\u0165 \u0161peci\u00e1lne upraven\u00fd s\u00fabor .gitattributes a zabezpe\u010di\u0165 jeho zaradenie do indexu.  <\/ul>\n<p>Zverejnenie aktualiz\u00e1ci\u00ed bal\u00edkov v distrib\u00faci\u00e1ch je mo\u017en\u00e9 sledova\u0165 na str\u00e1nkach: Debian, Ubuntu, Gentoo, RHEL, SUSE, Arch, FreeBSD, NetBSD. Pre zn\u00ed\u017eenie rizika \u00fatoku, ak nie je mo\u017en\u00e9 v\u010das nain\u0161talova\u0165 aktualiz\u00e1ciu, sa odpor\u00fa\u010da zdr\u017ea\u0165 sa pr\u00e1ce s ned\u00f4veryhodn\u00fdmi repozit\u00e1rmi a pou\u017e\u00edva\u0165 pr\u00edkaz &#171;git archive&#187;. D\u00f4le\u017eit\u00e9 je pam\u00e4ta\u0165 na to, \u017ee pr\u00edkaz &#171;git archive&#187; m\u00f4\u017ee by\u0165 spusten\u00fd implicitne, napr\u00edklad z git deamon. Na vypnutie sp\u00fa\u0161\u0165ania &#171;git archive&#187; v git deamone by sa mal zmeni\u0165 parameter daemon.uploadArch pr\u00edkazom &#171;git config &#8212;global daemon.uploadArch false&#187;.          <\/p>\n<p>\u010eal\u0161iu zranite\u013enos\u0165 (CVE-2022-41953) v produkte Git for Windows, ktor\u00e1 umo\u017e\u0148uje vykonanie k\u00f3du pri klonovan\u00ed cez grafick\u00e9 rozhranie ned\u00f4veryhodn\u00fdch vonkaj\u0161\u00edch repozit\u00e1rov, mo\u017eno zmieni\u0165. Probl\u00e9m je sp\u00f4soben\u00fd t\u00fdm, \u017ee Git GUI pre Windows po oper\u00e1cii &#171;checkout&#187; automaticky sp\u00fa\u0161\u0165a niektor\u00e9 pr\u00edkazy po spracovan\u00ed, ako je spustenie programu na kontrolu pravopisu, pri\u010dom cesty na vyh\u013ead\u00e1vanie s\u00faboru na kontrolu pravopisu zah\u0155\u0148aj\u00fa aj sklonovan\u00e9 pracovn\u00e9 adres\u00e1re (\u00fatok sa redukuje na pridan\u00ed spell-check do pracovn\u00e9ho stromu repozit\u00e1ra).<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58498\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 \u0438 2.30.7, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b &#171;git archive&#187; \u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u043c\u0438 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435 \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0438 \u0440\u0430\u0437\u0431\u043e\u0440\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106404","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 \u0438 2.30.7, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Git, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 \u0438 2.30.7, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-01-19T04:48:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-01-19T12:02:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dve zranite\u013enosti v Gite, schopn\u00e9 sp\u00f4sobi\u0165 vzdialen\u00e9 vykon\u00e1vanie k\u00f3du | ProHoster","description":"Boli publikovan\u00e9 korek\u010dn\u00e9 vydania distribuovan\u00e9ho syst\u00e9mu spr\u00e1vy zdrojov\u00fdch k\u00f3dov Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 a 2.30.7, v ktor\u00fdch boli odstr\u00e1nen\u00e9 dve zranite\u013enosti.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Git, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u0442\u0435\u043a\u0441\u0442\u0430\u043c\u0438 Git 2.39.1, 2.38.3, 2.37.5, 2.36.4, 2.35.6, 2.34.6, 2.33.6, 2.32.5, 2.31.6 \u0438 2.30.7, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/dve-uyazvimosti-v-git-sposobnye-privesti-k-udalyonnomu-vypolneniyu-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-01-19T04:48:10+00:00","article:modified_time":"2023-01-19T12:02:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/106404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=106404"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/106404\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=106404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=106404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=106404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}