CRITICAL10.0npm
GHSA-2gg9-6p7w-6cpj· CVE-2026-34208SandboxJS: Sandbox integrity escape
Modified: 4/6/2026
package
npm/@nyariv/sandboxjs
pkg:npm/%40nyariv/sandboxjs
CRITICAL10.0npm
GHSA-58jh-xv4v-pcx4· CVE-2026-25520@nyariv/sandboxjs has a Sandbox Escape issue
Modified: 2/6/2026
CRITICAL10.0npm
GHSA-66h4-qj4x-38xp· CVE-2026-25587@nyariv/sandboxjs has a Sandbox Escape vulnerability
Modified: 2/6/2026
CRITICAL10.0npm
GHSA-6r9f-759j-hjgv· CVE-2026-26954SandboxJS affected by a Sandbox Escape
Modified: 3/16/2026
MEDIUMnpm
GHSA-7p5m-xrh7-769r· CVE-2026-32723SandboxJS has an execution-quota bypass (cross-sandbox currentTicks race) in SandboxJS timers
Modified: 3/19/2026
CRITICAL10.0npm
GHSA-7x3h-rm86-3342· CVE-2026-25641@nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses
Modified: 2/6/2026
MEDIUMnpm
GHSA-8pfc-jjgw-6g26· CVE-2026-34211SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
Modified: 4/6/2026
CRITICAL10.0npm
GHSA-9p4w-fq8m-2hp7· CVE-2026-25142SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE
Modified: 2/18/2026
HIGHnpm
GHSA-9qm3-6qrr-c76m· CVE-2025-34146@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCE
Modified: 7/31/2025
CRITICAL10.0npm
GHSA-g8f2-4f4f-5jqw· CVE-2026-43898SandboxJS has a sandbox escape via Function.caller leakage of internal call op
Modified: 9/10/2026
MEDIUMnpm
GHSA-hg73-4w7g-q96w· CVE-2026-34217SandboxJS: Sandbox Escape via Prop Object Leak in New Handler
Modified: 4/6/2026
CRITICAL10.0npm
GHSA-jjpw-65fv-8g48· CVE-2026-25586@nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution
Modified: 2/6/2026
CRITICAL9.0npm
GHSA-ww7g-4gwx-m7wj· CVE-2026-25881@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
Modified: 2/10/2026
CRITICAL10.0npm
GHSA-wxhw-j4hc-fmq6· CVE-2026-23830SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
Modified: 2/3/2026