Skip to content
Vulnerability intelligence

CVE-2025-61927: happy-dom untrusted pages run commands

The first fix left a gap. A second advisory closed part of it, and Endor Labs still advises extra isolation.

2025
What WebPulse reported · 1 analysis
Endor Labs: the fix for the happy-dom code-execution flaw left a gap

The first fix left a gap. A second advisory closed part of it, and Endor Labs still advises extra isolation.

October 13, 2026
View CVE-2025-61927 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2025-3248 CVE-2025-8671 CVE-2025-68788 CVE-2025-67644 CVE-2025-66032 CVE-2025-64755 CVE-2025-62410 CVE-2025-59828