nyariv sandboxjs vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202613

Newest CVEs

• CVE-2026-43898

  SandboxJS: Sandbox escape via Function.caller leakage of internal call op

  nyariv · SandboxJS

  Critical10.0
• CVE-2026-34217

  SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler

  nyariv · SandboxJS

  Medium6.9
• CVE-2026-34211

  SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser

  nyariv · SandboxJS

  Medium6.9
• CVE-2026-34208

  SandboxJS: Sandbox integrity escape

  nyariv · SandboxJS

  Critical10.0
• CVE-2026-32723

  SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)

  nyariv · SandboxJS

  Medium4.8
• CVE-2026-26954

  SandboxJS has a Sandbox Escape

  nyariv · SandboxJS

  Critical10.0
• CVE-2026-25881

  @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)

  nyariv · SandboxJS

  Critical9.1
• CVE-2026-25586

  SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution

  nyariv · SandboxJS

  Critical10.0
• CVE-2026-25520

  SandboxJS has a Sandbox Escape

  nyariv · SandboxJS

  Critical10.0
• CVE-2026-25587

  SandboxJS has a Sandbox Escape

  nyariv · SandboxJS

  Critical10.0