happy-dom

3 known vulnerabilities · 0 critical · 0 high

happy-dom's `--disallow-code-generation-from-strings` is not sufficient for isolating untrusted JavaScript

Published Oct 15, 2025

Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code

Published Mar 26, 2026

Happy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies

Published Mar 29, 2026

Check your entire dependency tree at onceRun dependency scan →