Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Vendor: nyariv Clear all filters
TI-2026-26503 CVE-2026-34208 · GHSA-2gg9-6p7w-6cpj

SandboxJS: Sandbox integrity escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00581 Published 2026-04-06 Fixed in 0.8.36 CWE-693
TI-2026-21440 CVE-2026-26954 · GHSA-6r9f-759j-hjgv

SandboxJS has a Sandbox Escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00622 Published 2026-03-13 Fixed in 0.8.34 CWE-94
TI-2026-20629 CVE-2026-25520 · GHSA-58jh-xv4v-pcx4

SandboxJS has a Sandbox Escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0085 Published 2026-02-06 Fixed in 0.8.29 CWE-74
TI-2026-20694 CVE-2026-25587 · GHSA-66h4-qj4x-38xp

SandboxJS has a Sandbox Escape

Priority HIGH 82

SandboxJS is a JavaScript sandboxing library.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00701 Published 2026-02-06 Fixed in 0.8.29 CWE-94
TI-2025-24300 CVE-2025-34146 · GHSA-9qm3-6qrr-c76m

nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS

Priority MEDIUM 64

A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code.

CVSS 4.0HIGH 7.0 Local No auth No interaction EPSS 0.00245 Published 2025-07-31 Fixed in 0.8.24 CWE-1321