Vulnerabilidades em capricorn86
9 resultadosAnálise Vexday
O fornecedor capricorn86 apresenta footprint reduzido com 5 CVEs catalogadas, nenhuma sob exploração ativa no momento. Destaca-se a presença de 2 vulnerabilidades críticas (CVSS alto), predominantemente relacionadas a CWE-94 (execução de código arbitrário), indicando risco de comprometimento direto em caso de exposição. A ausência de publicações recentes sugere que o risco está estabilizado, sem novos vetores descobertos nos últimos 90 dias.
CVE-2024-51757CRITICALFixes security vulnerability that allowed for server side code to be executed by a <script> tagEPSS 0.8%CVE-2026-33943HIGHHappy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable codeEPSS 0.6%CVE-2025-61927HIGHHappy-DOM has VM Context EscapeEPSS 0.6%CVE-2026-115895HIGHHappy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code executionEPSS 0.5%CVE-2026-34226HIGHHappy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookiesEPSS 0.5%CVE-2026-118660HIGHHappy DOM: SSRF via iframe and link stylesheet when parsing untrusted HTMLEPSS 0.4%CVE-2026-118659HIGH@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open ProxyEPSS 0.4%CVE-2025-62410CRITICAL--disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript in happy-domEPSS 0.4%CVE-2026-118661MEDIUMHappy DOM: Cookie scope forgery: no DNS-label boundary on Domain= matching , attacker origin sets victim cookiesEPSS 0.3%