CVE-2024-51757 Fixes security vulnerability that allowed for server side code to be executed by a <script> tag

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised to upgrade to version 15.10.2. There ar...

CVE-2024-51757 Fixes security vulnerability that allowed for server side code to be executed by a <script> tag

happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised to upgrade to version 15.10.2. There ar...

@casablanca-css/core (0.2.0), @nuxtjs/device (>=3.2.0, <=3.2.2) +4 more potentially affected by CVE-2024-51757 via happy-dom (>=15.0.0, <=15.7.4)

happy-dom NPM version =15.0.0, =3.2.0, =6.0.1, =4.1.4, =5.1.4, =1.1.78, =1.1.79 Source cves: CVE-2024-51757 Source advisory: OSV:GHSA-96G7-G7G9-JXW8...