Fix/CVE 2025 62410 (#7088)

bdbch · web-flow · commit 1351d4d61b8b · 2025-10-16T09:52:08.000+02:00
* fix: update happy-dom to 20.0.2 minimum

* add changeset
diff --git a/.changeset/tender-coats-poke.md b/.changeset/tender-coats-poke.md
@@ -0,0 +1,5 @@
+---
+'@tiptap/html': patch
+---
+
+Fix [CVE-2025-62410](https://www.cve.org/CVERecord?id=CVE-2025-62410) by updating happy-dom to ^20.0.2
diff --git a/packages/html/package.json b/packages/html/package.json
@@ -45,12 +45,12 @@
   "devDependencies": {
     "@tiptap/core": "workspace:^",
     "@tiptap/pm": "workspace:^",
-    "happy-dom": "^20.0.0"
+    "happy-dom": "^20.0.2"
   },
   "peerDependencies": {
     "@tiptap/core": "workspace:^",
     "@tiptap/pm": "workspace:^",
-    "happy-dom": "^20.0.0"
+    "happy-dom": "^20.0.2"
   },
   "repository": {
     "type": "git",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +'@tiptap/html': patch
 +---
++
 +Fix [CVE-2025-62410](https://www.cve.org/CVERecord?id=CVE-2025-62410) by updating happy-dom to ^20.0.2