Aller au contenu
9.3 Critique

CVE-2024-51757 happy-dom is a JavaScript implementation of a web browser without its graphical user interface

Description

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised to upgrade to version 15.10.2. There are no known workarounds for this vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
happy-dom 15.10 premières → < 15.10.2 15.10.2

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 9 CVE de happy-dom →
Suivre cette CVE