CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

7 matches found

Vulnrichment•added 2026/03/27 9:15 p.m.•3 views

CVE-2026-33943 Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. In versions 15.10.0 through 20.8.7, a code injection vulnerability in ECMAScriptModuleCompiler allows an attacker to achieve Remote Code Execution RCE by injecting arbitrary JavaScript expressions insi...

8.8CVSS6.1AI score0.00085EPSS

Exploits1References3

CVE•added 2026/03/27 9:15 p.m.•17 views

CVE-2026-33943

Happy DOM CVE-2026-33943 involves a code-injection vulnerability in the ECMAScriptModuleCompiler: in versions 15.10.0 through 20.8.7, unsanitized content within export { ... } in ES modules is interpolated into generated code as an executable expression, with backticks not removed, enabling templ...

9.8CVSS6.1AI score0.00085EPSS

Exploits1References3Affected Software1

Positive Technologies•added 2026/03/26 12:0 a.m.•6 views

PT-2026-28574

Name of the Vulnerable Software and Affected Versions Happy DOM versions 15.10.0 through 20.8.7 Description Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Versions 15.10.0 through 20.8.7 contain a code injection issue in the ECMAScriptModuleCompile...

8.8CVSS6.1AI score0.00085EPSS

Exploits1References12

RedhatCVE•added 2026/02/20 1:27 p.m.•4 views

CVE-2026-25364

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through = 20.8.8...

5.3CVSS5.5AI score0.00042EPSS

Exploits0References1