Skip to content
OpenAdvisories

Vendor

capricorn86

9 known vulnerabilities.

Products

happy-dom 9
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-62410

    --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom

    In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom. The untrusted script and the rest of the application still run in the same Isolate/process, so attackers ca…

    capricorn86 happy-dom happy-dom npm
  • Critical 9.3
    CVE-2024-51757

    Fixes security vulnerability that allowed for server side code to be executed by a <script> tag

    happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised t…

    capricorn86 happy-dom happy-dom npm