CPE

Cpe:2.3:a:happy-Dom:happy-Dom::::::::

1 brief RSS

Happy DOM: Server-side request forgery via default HTML parsing (CVE-2026-118660)

Happy DOM versions up to 20.14.6 are vulnerable to SSRF because they allow default external resource fetching for iframe and link stylesheet elements during untrusted HTML parsing.

happy-dom ssrf library-vulnerability web-application-security

2t 1c 1h ago

Cpe:2.3:a:happy-Dom:happy-Dom:*:*:*:*:*:*:*:*

Happy DOM: Server-side request forgery via default HTML parsing (CVE-2026-118660)

Cpe:2.3:a:happy-Dom:happy-Dom::::::::