Known vulnerabilities in Happy DOM

Software: Happy DOM
Software CPE: cpe:2.3:a:capricorn86:happy-dom:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Happy DOM Happy DOM is affected by 6 known vulnerabilities: 3 high, 3 medium Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154092 - Reliance on Cookies without Validation and Integrity Checking
CVE-2026-118661
CWE-565 Medium
Available
No
20.14.6 12.10.2026 SB2026101242
#VU128058 - Insertion of Sensitive Information Into Sent Data
CVE-2026-34226
CWE-201 Medium
No
No
20.8.9 27.04.2026 SB2026042771
#VU128057 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33943
CWE-94 High
No
No
20.8.8 27.04.2026 SB2026042770
#VU120002 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-62410
CWE-1321 High
No
No
20.0.2 16.12.2025 SB2025121631
#VU120001 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-61927
CWE-94 High
No
No
20.0.0 16.12.2025 SB2025121630
SB2025121638
#VU120000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-51757
CWE-79 Medium
No
No
15.10.2 16.12.2025 SB2025121629