IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2024-11-06 20:15

MODIFIED

2024-11-08 19:01

EPSS (Prob. Exploit)

0.77%

Top 44.7%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04 OSV 🔗 2026-09-20

> DESCRIPTION

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised to upgrade to version 15.10.2. There are no known workarounds for this vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-96g7-g7g9-jxw8 CRITICAL

happy-dom allows for server side code to be executed by a <script> tag

AFFECTED PACKAGES:

NPM / happy-dom

< 15.10.2

Fixed in: 15.10.2

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Fixes security vulnerability that allowed for server side code to be executed by a <script> tag

AFFECTED PACKAGES:

Unknown / Unknown

307 versions affected

ALIASES:

GHSA-96g7-g7g9-jxw8

> HISTORIQUE DES MODIFICATIONS

Première apparition

06/11/2024 20:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 14:56

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui