HA
Product
happy-dom
by capricorn86 · last CVE Oct 28, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch

Add happy-dom to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118661
New
6.5–Oct 28
Happy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies
Affected: < 20.14.6
Showing 1