Login Request a demo
HA
Product
happy-dom
by capricorn86 · last CVE Oct 28, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 5Medium 1Low 0
Severity
All severities8Critical2High5Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add happy-dom to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-115895
New
8.8
0%
Oct 23
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
Affected: >= 17.0.0, < 21.0.4
CVE-2026-118660
New
8.6–Oct 28
Happy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTML
Affected: < 21.0.0
CVE-2026-118659
New
7.5–Oct 28
@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy
Affected: < 21.0.2
CVE-2026-34226
7.5
0%
Mar 27
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies
Affected: < 20.8.9
CVE-2025-61927
7.2
1%
Oct 10
Happy-DOM has VM Context Escape
Affected: < 20.0.0
Showing 5