CVE-2024-51757
1 advisory.
npm/happy-dom CVE-2024-51757: critical 9.3, EPSS 0.77%
happy-dom allows for server side code to be executed by a <script> tag
Action: Upgrade happy-dom to 15.10.2 or later.
npm i happy-dom@15.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 15.10.2 | - |
Fixed versions
| 15.10.2 |
Sources
- osv: GHSA-96g7-g7g9-jxw8
- nvd: CVE-2024-51757
- https://github.com/capricorn86/happy-dom/security/advisories/GHSA-96g7-g7g9-jxw8
- https://github.com/capricorn86/happy-dom/issues/1585
- https://github.com/capricorn86/happy-dom/pull/1586
- https://github.com/capricorn86/happy-dom/commit/5ee0b1676d4ce20cc2a70d1c9c8d6f1e3f57efac
- https://github.com/capricorn86/happy-dom/commit/d23834c232f1cf5519c9418b073f1dcec6b2f0fd
- https://github.com/capricorn86/happy-dom
- https://github.com/capricorn86/happy-dom/releases/tag/v15.10.2
CVE-2024-51757 · published · modified · JSON