CVE-2025-61927: Happy DOM RCE Vulnerability
Source: Sentinelone
Published:
<p>CVE-2025-61927 affects Happy DOM, a JavaScript implementation of a web browser without a graphical user interface. Happy DOM versions 19 and lower expose consumers to remote code execution when untrusted JavaScript runs inside the library's VM Context. A Node.js VM Context is not an isolated sand