CVE-2026-118661 | capricorn86 Happy DOM up to 20.14.5 CookieContainer CookieContainer.ts cookieMatchesURL session fixiation

October 28, 2026 Yanac

A vulnerability described as critical has been identified in capricorn86 Happy DOM up to 20.14.5. This affects the function cookieMatchesURL of the file src/cookie/CookieContainer.ts of the component CookieContainer. Such manipulation leads to session fixiation.

This vulnerability is documented as CVE-2026-118661. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More