Vendors / capricorn86 Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now capricorn86 records in CISA KEV No capricorn86 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
happy-dom is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00772 · Published 2024-11-06 · Fixed in 15.10.2 CWE-79
Priority HIGH 76
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00646 · Published 2026-03-27 · Partial fix · 20.8.8 CWE-94
Priority HIGH 76
In versions before 20.0.2, it was found that --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-dom.
CVSS 4.0 CRITICAL 9.4· Network · Low privileges · User interaction · EPSS 0.0036 · Published 2025-10-15 · Fixed in 20.0.2 CWE-1321
Priority HIGH 73
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00473 · Published 2026-10-23 · Partial fix · 21.0.4 CWE-94
Priority HIGH 72
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0039 · Published 2026-10-28 · Fixed in 21.0.2 CWE-918
Priority HIGH 72
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00466 · Published 2026-03-27 · Partial fix · 20.8.9 CWE-201
Priority HIGH 68
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00272 · Published 2026-10-28 · Partial fix · 20.14.6 CWE-565
Priority HIGH 65
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 4.0 HIGH 7.2· Network · High privileges · User interaction · EPSS 0.00642 · Published 2025-10-10 · Fixed in 20.0.0 CWE-94
Priority MEDIUM 43
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.
CVSS 3.1 HIGH 8.6· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-10-28 · Partial fix · 21.0.0 CWE-918
Open these records in search → All records by CVSS severity
3 5 1 0 0
THREATIST.IORead the docs