CVE-2026-118661

A flaw was found in happy-dom. The cookie management component fails to properly validate and match domain attributes, allowing it to accept cookies for unrelated domains and match hostnames without enforcing domain boundaries. In server-side rendering environments, a remote attacker controlling ...