VULNRABLE / Vulnerability / CVE-2026-115895
CVE-2026-115895
HIGH LOW happy-dom GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
0%
Source
GHSA
Summary
Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution
What this means
CVE-2026-115895 is a high-severity vulnerability affecting happy-dom, rated CVSS 8. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published October 23, 2026.
View full advisory at GHSA →