Read the docs

nyariv

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

nyariv records in CISA KEV

No nyariv vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sandboxjs 13 records HIGH

Records

14 records

TI-2026-26503 CVE-2026-34208 · GHSA-2gg9-6p7w-6cpj

SandboxJS: Sandbox integrity escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00581 Published 2026-04-06 Fixed in 0.8.36 CWE-693
TI-2026-21440 CVE-2026-26954 · GHSA-6r9f-759j-hjgv

SandboxJS has a Sandbox Escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00569 Published 2026-03-13 Fixed in 0.8.34 CWE-94
TI-2026-20694 CVE-2026-25587 · GHSA-66h4-qj4x-38xp

SandboxJS has a Sandbox Escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00701 Published 2026-02-06 Fixed in 0.8.29 CWE-94
TI-2026-20629 CVE-2026-25520 · GHSA-58jh-xv4v-pcx4

SandboxJS has a Sandbox Escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0085 Published 2026-02-06 Fixed in 0.8.29 CWE-74
TI-2025-24300 CVE-2025-34146 · GHSA-9qm3-6qrr-c76m

nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS

Priority MEDIUM 64

A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code.

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00245 Published 2025-07-31 Fixed in 0.8.24 CWE-1321
Open these records in search →