{"action":"Upgrade happy-dom to 20.0.0 or later.","affected":[{"fixed":"20.0.0","introduced":"0"}],"component":"happy-dom","cve_ids":["CVE-2025-61927"],"ecosystem":"npm","epss":0.00642,"exploited":false,"fixed_versions":["20.0.0"],"ghsa_id":"GHSA-37j7-fg3j-429f","id":"tcs_01M5KEWF6Y52TEC4G563VAW2S2","modified_at":"2025-10-13T15:48:53Z","published_at":"2025-10-10T23:46:42Z","references":["https://osv.dev/vulnerability/GHSA-37j7-fg3j-429f","https://github.com/capricorn86/happy-dom/security/advisories/GHSA-37j7-fg3j-429f","https://nvd.nist.gov/vuln/detail/CVE-2025-61927","https://github.com/capricorn86/happy-dom/commit/819d15ba289495439eda8be360d92a614ce22405","https://github.com/capricorn86/happy-dom/commit/de438ad72921c69793584aa657b48d3655dfac97","https://github.com/capricorn86/happy-dom","https://github.com/capricorn86/happy-dom/releases/tag/v20.0.0"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-37j7-fg3j-429f","url":"https://osv.dev/vulnerability/GHSA-37j7-fg3j-429f"},{"source":"nvd","source_id":"CVE-2025-61927","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61927"}],"summary":"Happy DOM: VM Context Escape can lead to Remote Code Execution"}