中危漏洞公告JavaScript / Node.js2026/10/29 06:06

Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies

影響: npm:happy-dom <= 20.14.5 → 20.14.6

A cookie-scoping bug in happy-dom lets an attacker origin set cookies that a victim origin then receives, diverging from browser semantics. Details happy-dom matches Domain=example.com against notexample.com (endsWith without a DNS-label boundary), diverging from browser semantics (verified 20.11.6 npm latest: cookieMatchesURL(Domain=example.com, url=http://notexample.com) = true). Relevant where happy-dom is used for SSR/prerender cookie handling. Matching in src/cookie/CookieContainer.ts. PoC…

在 GitHub Advisory Database 阅读

在 X 上接收快讯漏洞利用、重大泄露和故障，附应对措施。

关注 @vulnpulse_app

CVE	CVE-2026-118661
来源	GitHub Advisory Database
获取时间	2026/10/29 09:48
数据	Markdown　JSON

2026/10/29 06:06，GitHub Advisory Database 发布了“Happy DOM has cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookies”（类型：漏洞公告）。严重程度为“中危”（medium）。相关技术：JavaScript / Node.js。CVE：CVE-2026-118661。