CVE-2026-33943
1 advisory.
npm/happy-dom CVE-2026-33943: high 8.8
Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code
Action: Upgrade happy-dom to 20.8.8 or later.
npm i happy-dom@20.8.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 15.10.0 | 20.8.8 | - |
Fixed versions
| 20.8.8 |
Sources
- osv: GHSA-6q6h-j7hj-3r64
- https://github.com/capricorn86/happy-dom/security/advisories/GHSA-6q6h-j7hj-3r64
- https://nvd.nist.gov/vuln/detail/CVE-2026-33943
- https://github.com/capricorn86/happy-dom/commit/5437fdf8f13adb9590f9f52616d9f69c3ee8db3c
- https://github.com/capricorn86/happy-dom
- https://github.com/capricorn86/happy-dom/releases/tag/v20.8.8
CVE-2026-33943 · published · modified · JSON