What is GHSA-mgv2-57vj-99xc?

GHSA-mgv2-57vj-99xc is a security advisory published by GitHub Security Advisories with Low severity. Low severity vulnerability that affects eye.js

Why does GHSA-mgv2-57vj-99xc have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-mgv2-57vj-99xc?

GHSA-mgv2-57vj-99xc affects 1 product, including: npm/eye.js:= 1.2.0.

GHSA-mgv2-57vj-99xcLowDisclosed before NVD

Low severity vulnerability that affects eye.js

Vendor

GitHub Security Advisories

Published

October 7, 2019

Last Modified

January 9, 2023

📋 Description

Test breaking

Impact

In v1.2.0, tests are broken: all tests are always succeeding. If tests are looking for security vulnerabilities, these were compromised.

Patches

Users should upgrade to v1.2.1

Workarounds

Users who don't use eye.js for looking for vulnerabilities are safe. Upgrading will just fix some bugs.

For more information

If you have any questions or comments about this advisory:

Open an issue in EyeJS
Email us at [email protected]

🎯 Affected products1

npm/eye.js:= 1.2.0

🔗 References (2)

https://github.com/arguiot/EyeJS/security/advisories/GHSA-mgv2-57vj-99xc
https://github.com/advisories/GHSA-mgv2-57vj-99xc