Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/27 12:00 a.m.•0 views

CVE-2026-33943: Improper Control of Generation of Code

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. In versions 15.10.0 through 20.8.7, a code injection vulnerability in ECMAScriptModuleCompiler allows an attacker to achieve Remote Code Execution RCE by injecting arbitrary JavaScript expressions insi...

9.8CVSS6AI score0.0097EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2026/03/27 12:00 a.m.•21 views

happy-dom 代码注入漏洞

Happy-Dom is a JavaScript implementation of a web browser with no graphical interface, developed by David Ortner. Versions of Happy-Dom prior to 20.8.7 contained a code injection vulnerability. This vulnerability stemmed from issues with the ECMAScriptModuleCompiler, which could allow attackers t...

9.8CVSS6.3AI score0.0097EPSS
SaveExploits1References3
Rows per page
Query Builder