Skip to content
Capricorn86 vulnerabilities
Newest
-
capricorn86 happy-dom
Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies
CVE-2026-118661
Fix available
6.5 Medium
-
capricorn86 happy-dom
Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML
CVE-2026-118660
Fix available
8.6 High
-
capricorn86 happy-dom
@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy
CVE-2026-118659
7.5 High
-
capricorn86 happy-dom
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
CVE-2026-115895
Fix available
8.8 High
-
capricorn86 happy dom, happy-dom, red hat ansible automation platform 2 +1 more +3 more
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies
CVE-2026-34226
Fix available
7.5 High
-
capricorn86 happy-dom, happy dom, red hat ansible automation platform 2 +1 more +3 more
Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code
CVE-2026-33943
Fix available
8.8 High
-
capricorn86 happy-dom
--disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom
CVE-2025-62410
Fix available
9.4 Critical
-
capricorn86 happy-dom
Happy-DOM has VM Context Escape
CVE-2025-61927
Fix available
7.2 High
-
capricorn86 happy-dom
Fixes security vulnerability that allowed for server side code to be executed by a <script> tag
CVE-2024-51757
Fix available
9.3 Critical