nyariv sandboxjs vulnerabilities
14 published CVEs name nyariv sandboxjs among the affected products.
- 14Published CVEs14 of them scored
- 13Last 12 monthspublished in the last year
- 10Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-43898
SandboxJS: Sandbox escape via Function.caller leakage of internal call op
nyariv · SandboxJS
Critical10.0 - CVE-2026-34217
SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler
nyariv · SandboxJS
Medium6.9 - CVE-2026-34211
SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
nyariv · SandboxJS
Medium6.9 - CVE-2026-34208
SandboxJS: Sandbox integrity escape
nyariv · SandboxJS
Critical10.0 - CVE-2026-32723
SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)
nyariv · SandboxJS
Medium4.8 - CVE-2026-26954
SandboxJS has a Sandbox Escape
nyariv · SandboxJS
Critical10.0 - CVE-2026-25881
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
nyariv · SandboxJS
Critical9.1 - CVE-2026-25586
SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution
nyariv · SandboxJS
Critical10.0 - CVE-2026-25520
SandboxJS has a Sandbox Escape
nyariv · SandboxJS
Critical10.0 - CVE-2026-25587
SandboxJS has a Sandbox Escape
nyariv · SandboxJS
Critical10.0