CYBER CODE RED

Get real-time updates on Telegram

P5

CVE-2024-51757, CVE-2025-61927, CVE-2026-34226: happy-dom < 20.0.0

CVE-2024-51757, CVE-2025-61927, CVE-2026-34226 affects @happy-dom/jest-environment. EPSS 0.00772 (percentile 0.55265), scored 24-Oct-2026. Fixed version: 9.10.9-tuxcare.1. Fixed version: 14.12.3-tuxcare.2. Fixed version: 9.10.9-tuxcare.1. Fixed version: 9.20.3-tuxcare.3. Fixed version: 9.20.3-tuxcare.3.

CVE-2024-51757

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

CVE-2025-61927

Affected technology

happy-dom · < 20.0.0
capricorn86

Component: Not specified by the source
Function: to

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · Active user interaction

What an attacker can do

The source reports that an attacker could run code remotely under the conditions described by the source. Vendor/CNA’s CVSS 4.0 assessment (base score 7.2/10) rates confidentiality impact as low; integrity and availability impact as high.

CVE-2026-34226

Affected technology

Product not specified by the source · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published

CWE
CWE-94
Product
@happy-dom/jest-environment
CCR priority
0.2 /100 (P5)
EPSS
0.00772 · percentile 0.55265 · 2026-10-24
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2024-51757.html