CVE-2026-115895 | capricorn86 Happy DOM up to 21.0.3 ECMAScriptModuleCompiler ECMAScriptModuleCompiler.ts initialization (EUVD-2026-109189)

October 23, 2026 Yanac

A vulnerability identified as critical has been detected in capricorn86 Happy DOM up to 21.0.3. This affects an unknown part of the file packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts of the component ECMAScriptModuleCompiler. This manipulation causes improper initialization.

This vulnerability appears as CVE-2026-115895. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More