happy-dom vulnerabilities (TuxCare)
6 vulnerabilities.
happy-domTuxCareHappy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies6.5 Mediumhappy-domTuxCareHappy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML8.6 Highhappy-domTuxCareHappy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution8.8 Highhappy-domTuxCareHappy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies7.5 Highhappy-domTuxCareHappy-DOM has VM Context Escape7.2 Highhappy-domTuxCareFixes security vulnerability that allowed for server side code to be executed by a <script> tag9.3 Critical