Skip to content

Update dependency jsdom to v21#92

Open
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/jsdom-21.x
Open

Update dependency jsdom to v21#92
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/jsdom-21.x

Conversation

@mend-for-github-com
Copy link
Copy Markdown
Contributor

@mend-for-github-com mend-for-github-com bot commented Aug 1, 2025

This PR contains the following updates:

Package Type Update Change
jsdom dependencies major ^20.0.0^21.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
High High 8.7 CVE-2025-7783

Release Notes

jsdom/jsdom (jsdom)

v21.0.0

Compare Source

A potentially-breaking bug fix:

  • Fixed the window, document, location, and top properties of Window to be non-configurable. (@​ExE-Boss)

Other changes:

  • Added support for <input type=image> submitting forms. (@​jenseng)
  • Added the location setter to the Window object, which forwards to the location.href setter. Setting the URL is still only implemented for fragment navigations, however. (@​ExE-Boss)
  • Fixed defer="" <script> elements that are added after DOMContentLoaded to execute, instead of being skipped.
  • Fixed selectElement.selectedOptions being incorrect when optionElement.selected is set. This was a regression introduced in v20.0.1. Unfortunately this also reverts the performance improvement when appending <option> elements that was introduced then. (@​eps1lon)
  • Fixed the self, locationbar, menubar, personalbar, scrollbars, statusbar, toolbar, frames, parent, external, length, and screen properties of Window to be replaceable: that is, setting them will override their values, instead of having the new value be ignored. (@​ExE-Boss)
  • Fixed a few issues with JSDOM.fromURL() in the browser build of jsdom. (@​LungZeno)

  • If you want to rebase/retry this PR, check this box

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants