GHSA-w4gp-fjgq-3q4g
High · 7.5CVSS
7.5
EPSS
—
Published
Mar 29, 2026
CISA due date
—
The record
Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | happy-dom | 0 | 20.8.9 |
Related vulnerabilities
- CVE-2026-34226 Happy DOM is a JavaScript implementation of a web browser without its graphical user… Same vulnerability
- CVE-2026-33943 Happy DOM is a JavaScript implementation of a web browser without its graphical user… Also affects happy-dom
- GHSA-6q6h-j7hj-3r64 Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as… Also affects happy-dom
- CVE-2025-61927 Happy DOM is a JavaScript implementation of a web browser without its graphical user… Also affects happy-dom
- CVE-2024-51757 happy-dom is a JavaScript implementation of a web browser without its graphical user… Also affects happy-dom
- CVE-2026-105777 GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before… CWE-201
- CVE-2026-107315 pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is… CWE-201
- CVE-2026-62088 Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress… CWE-201