{"action":"Upgrade happy-dom to 15.10.2 or later.","affected":[{"fixed":"15.10.2","introduced":"0"}],"component":"happy-dom","cve_ids":["CVE-2024-51757"],"ecosystem":"npm","epss":0.00772,"exploited":false,"fixed_versions":["15.10.2"],"ghsa_id":"GHSA-96g7-g7g9-jxw8","id":"tcs_01M5KFF101S1B36DXC0VNHYSZN","modified_at":"2024-11-06T23:39:29Z","published_at":"2024-11-06T15:27:50Z","references":["https://osv.dev/vulnerability/GHSA-96g7-g7g9-jxw8","https://github.com/capricorn86/happy-dom/security/advisories/GHSA-96g7-g7g9-jxw8","https://nvd.nist.gov/vuln/detail/CVE-2024-51757","https://github.com/capricorn86/happy-dom/issues/1585","https://github.com/capricorn86/happy-dom/pull/1586","https://github.com/capricorn86/happy-dom/commit/5ee0b1676d4ce20cc2a70d1c9c8d6f1e3f57efac","https://github.com/capricorn86/happy-dom/commit/d23834c232f1cf5519c9418b073f1dcec6b2f0fd","https://github.com/capricorn86/happy-dom","https://github.com/capricorn86/happy-dom/releases/tag/v15.10.2"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-96g7-g7g9-jxw8","url":"https://osv.dev/vulnerability/GHSA-96g7-g7g9-jxw8"},{"source":"nvd","source_id":"CVE-2024-51757","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-51757"}],"summary":"happy-dom allows for server side code to be executed by a <script> tag"}