Security
فارسی
All products

@nyariv/sandboxjs

npm · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SandboxJS has a sandbox escape via Function.caller leakage of internal call opCVE-2026-43898 · GHSA-G8F2-4F4F-5JQW @nyariv/sandboxjs npm Critical Fix reported
SandboxJS: Sandbox integrity escape CVE-2026-34208 · GHSA-2GG9-6P7W-6CPJ @nyariv/sandboxjs npm Critical Fix reported
SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parserCVE-2026-34211 · GHSA-8PFC-JJGW-6G26 @nyariv/sandboxjs npm Medium Fix reported
SandboxJS: Sandbox Escape via Prop Object Leak in New HandlerCVE-2026-34217 · GHSA-HG73-4W7G-Q96W @nyariv/sandboxjs npm Medium Fix reported
SandboxJS has an execution-quota bypass (cross-sandbox currentTicks race) in SandboxJS timersCVE-2026-32723 · GHSA-7P5M-XRH7-769R @nyariv/sandboxjs npm Medium Fix reported
SandboxJS affected by a Sandbox EscapeCVE-2026-26954 · GHSA-6R9F-759J-HJGV @nyariv/sandboxjs npm Critical Fix reported
SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCECVE-2026-25142 · GHSA-9P4W-FQ8M-2HP7 @nyariv/sandboxjs npm Critical Fix reported
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)CVE-2026-25881 · GHSA-WW7G-4GWX-M7WJ @nyariv/sandboxjs npm Critical Fix reported
@nyariv/sandboxjs has a Sandbox Escape vulnerabilityCVE-2026-25587 · GHSA-66H4-QJ4X-38XP @nyariv/sandboxjs npm Critical Fix reported
@nyariv/sandboxjs has a Sandbox Escape issueCVE-2026-25520 · GHSA-58JH-XV4V-PCX4 @nyariv/sandboxjs npm Critical Fix reported
@nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accessesCVE-2026-25641 · GHSA-7X3H-RM86-3342 @nyariv/sandboxjs npm Critical Fix reported
@nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype PollutionCVE-2026-25586 · GHSA-JJPW-65FV-8G48 @nyariv/sandboxjs npm Critical Fix reported
SandboxJS has Sandbox Escape via Unprotected AsyncFunction ConstructorCVE-2026-23830 · GHSA-WXHW-J4HC-FMQ6 @nyariv/sandboxjs npm Critical Fix reported
@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCECVE-2025-34146 · GHSA-9QM3-6QRR-C76M @nyariv/sandboxjs npm High Fix reported