요약
- CVE-2024-51757은(는) happy-dom에 영향을 주는 심각 (CVSS 9.3) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 0.77%, 전체 취약점의 55.7%보다 높음.
- 조치: 15.10.2 이상으로 업데이트하세요.
| Package | Affected versions | Patched versions |
|---|
| happy-dom npm | < 15.10.2
| 15.10.2
|
Description
Impact
Consumers of the NPM package happy-dom
Patches
The security vulnerability has been patched in v15.10.2
Workarounds
No easy workarounds to my knowledge
References
#1585
NVD description
happy-dom is a JavaScript implementation of a web browser without its graphical user interface. Versions of happy-dom prior to 15.10.2 may execute code on the host via a script tag. This would execute code in the user context of happy-dom. Users are advised to upgrade to version 15.10.2. There are no known workarounds for this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free