{"id":"GHSA-mgv2-57vj-99xc","aliases":[],"status":"published","title":"Low severity vulnerability that affects eye.js","description":"## Test breaking\n\n### Impact\nIn v1.2.0, tests are broken: all tests are always succeeding. If tests are looking for security vulnerabilities, these were compromised.\n\n### Patches\nUsers should upgrade to `v1.2.1`\n\n### Workarounds\nUsers who don't use eye.js for looking for vulnerabilities are safe. Upgrading will just fix some bugs.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [EyeJS](https://github.com/arguiot/EyeJS)\n* Email us at [arguiot@gmail.com](mailto:arguiot@gmail.com)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2019-10-07T16:54:24Z","modified":"2023-01-09T05:03:09Z","fixes":[{"ecosystem":"npm","package":"eye.js","fixed_in":["1.2.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"eye.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.2.0"},{"last_affected":"1.2.0"},{"fixed":"1.2.1"}]}],"versions":["1.2.0"]},{"source":"osv","ecosystem":"npm","package":"eye.js","ranges":[{"type":"SEMVER","events":[{"introduced":"1.2.0"},{"fixed":"1.2.1"}]}],"versions":["1.2.0"]}],"references":[{"url":"https://github.com/arguiot/EyeJS/security/advisories/GHSA-mgv2-57vj-99xc","tags":["web"]},{"url":"https://github.com/advisories/GHSA-mgv2-57vj-99xc","tags":["advisory"]},{"url":"https://github.com/arguiot/EyeJS","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-mgv2-57vj-99xc","title":"Low severity vulnerability that affects eye.js","description":"## Test breaking\n\n### Impact\nIn v1.2.0, tests are broken: all tests are always succeeding. If tests are looking for security vulnerabilities, these were compromised.\n\n### Patches\nUsers should upgrade to `v1.2.1`\n\n### Workarounds\nUsers who don't use eye.js for looking for vulnerabilities are safe. Upgrading will just fix some bugs.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [EyeJS](https://github.com/arguiot/EyeJS)\n* Email us at [arguiot@gmail.com](mailto:arguiot@gmail.com)\n\n","status":"published","published":"2019-10-07T16:54:24Z","modified":"2023-01-09T05:03:09Z","updated_at":"2026-11-02T14:36:04.396827Z"}],"osv":[{"id":"GHSA-mgv2-57vj-99xc","title":"Low severity vulnerability that affects eye.js","description":"## Test breaking\n\n### Impact\nIn v1.2.0, tests are broken: all tests are always succeeding. If tests are looking for security vulnerabilities, these were compromised.\n\n### Patches\nUsers should upgrade to `v1.2.1`\n\n### Workarounds\nUsers who don't use eye.js for looking for vulnerabilities are safe. Upgrading will just fix some bugs.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [EyeJS](https://github.com/arguiot/EyeJS)\n* Email us at [arguiot@gmail.com](mailto:arguiot@gmail.com)\n\n","status":"published","published":"2019-10-07T16:54:24Z","modified":"2021-12-03T14:39:45Z","updated_at":"2026-11-02T15:46:51.811331Z"}]}}