VULNERABILITY INTELLIGENCE

CVE-2024-51757

EPSS probability0.77%
CISA KEVNot currently listed
Published2024-11-06
Last modified2026-06-17

Description

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised to upgrade to version 15.10.2. There are no known workarounds for this vulnerability.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references