Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

nyariv vulnerabilities

14 published CVEs name nyariv among the affected products.

Published CVEs
14
Last 12 months
13
Critical
10
Known exploited
0

Critical 10High 1Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20251
  2. 202613

Newest CVEs

  • CVE-2026-43898

    SandboxJS: Sandbox escape via Function.caller leakage of internal call op

    nyariv · SandboxJS

    Critical10.0
  • CVE-2026-34217

    SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler

    nyariv · SandboxJS

    Medium6.9
  • CVE-2026-34211

    SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser

    nyariv · SandboxJS

    Medium6.9
  • CVE-2026-34208

    SandboxJS: Sandbox integrity escape

    nyariv · SandboxJS

    Critical10.0
  • CVE-2026-32723

    SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)

    nyariv · SandboxJS

    Medium4.8
  • CVE-2026-26954

    SandboxJS has a Sandbox Escape

    nyariv · SandboxJS

    Critical10.0
  • CVE-2026-25881

    @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)

    nyariv · SandboxJS

    Critical9.1
  • CVE-2026-25586

    SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution

    nyariv · SandboxJS

    Critical10.0
  • CVE-2026-25520

    SandboxJS has a Sandbox Escape

    nyariv · SandboxJS

    Critical10.0
  • CVE-2026-25587

    SandboxJS has a Sandbox Escape

    nyariv · SandboxJS

    Critical10.0