Yüksek CVSS 7.5 PoC var
CVE-2026-34226: Happy Dom: güvenlik açığı
Açıklama (NVD)
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Versions prior to 20.8.9 may attach cookies from the current page origin (`window.location`) instead of the request target URL when `fetch(..., { credentials: "include" })` is used. This can leak cookies from origin A to destination B. Version 20.8.9 fixes the issue.
Özet bilgiler
- Ürün
- Capricorn86 Happy Dom
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- %0,47 (yüzdelik 41)
- CWE
- CWE-201
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| capricorn86-happy-dom | — | — | 20.8.9 |