2 matches found
CVE-2026-33943: Improper Control of Generation of Code
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. In versions 15.10.0 through 20.8.7, a code injection vulnerability in ECMAScriptModuleCompiler allows an attacker to achieve Remote Code Execution RCE by injecting arbitrary JavaScript expressions insi...
9.8CVSS6AI score0.0097EPSS
SaveExploits1References6
happy-dom 代码注入漏洞
Happy-Dom is a JavaScript implementation of a web browser with no graphical interface, developed by David Ortner. Versions of Happy-Dom prior to 20.8.7 contained a code injection vulnerability. This vulnerability stemmed from issues with the ECMAScriptModuleCompiler, which could allow attackers t...
9.8CVSS6.3AI score0.0097EPSS
SaveExploits1References3
20