GitHub Advisoryadvisory · npm

GHSA-mgv2-57vj-99xc Low severity vulnerability that affects eye.js

LOW Published 2019-10-07 Modified 2021-12-03 Official page ↗
Ecosystem
npm
Packages
eye.js
Severity
Low
Reviewed
2020-06-16

Affected packages

• npm eye.js: >= 1.2.0, < 1.2.1 → fixed in 1.2.1

Description

Test breaking Impact In v1.2.0, tests are broken: all tests are always succeeding. If tests are looking for security vulnerabilities, these were compromised. Patches Users should upgrade to `v1.2.1` Workarounds Users who don't use eye.js for looking for vulnerabilities are safe. Upgrading will just fix some bugs. For more information If you have any questions or comments about this advisory: • Open an issue in EyeJS • Email us at [email protected]

References