HA
Product
happy-dom
by capricorn86 · last CVE Oct 23, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 2Medium 0Low 0
Watch

Add happy-dom to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33943
9.8
1%
Mar 27
Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code
Affected: >= 15.10.0, < 20.8.8
CVE-2025-62410
9.4
0%
Oct 15
--disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom
Affected: < 20.0.2
Showing 2