pkg:npm/@nyariv/sandboxjs

All known vulnerabilities

• CRITICAL10.0CVE-2026-43898SandboxJS has a sandbox escape via Function.caller leakage of internal call op
  from 0, < 0.9.6
• CRITICAL10.0CVE-2026-34208SandboxJS: Sandbox integrity escape
  from 0, < 0.8.36
• CRITICAL10.0CVE-2026-26954SandboxJS affected by a Sandbox Escape
  from 0, < 0.8.34
• CRITICAL10.0CVE-2026-25641@nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses
  from 0, < 0.8.29
• CRITICAL10.0@nyariv/sandboxjs has a Sandbox Escape vulnerability
  from 0, < 0.8.29
• CRITICAL10.0@nyariv/sandboxjs has Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution
  from 0, < 0.8.29
• CRITICAL10.0@nyariv/sandboxjs has a Sandbox Escape issue
  from 0, < 0.8.29
• CRITICAL10.0SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE
  from 0, < 0.8.27
• CRITICAL10.0SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
  from 0, < 0.8.26
• CRITICAL9.0@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
  from 0, < 0.8.31
• —SandboxJS: Sandbox Escape via Prop Object Leak in New Handler
  from 0, < 0.8.36
• —SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
  from 0, < 0.8.36
• —SandboxJS has an execution-quota bypass (cross-sandbox currentTicks race) in SandboxJS timers
  from 0, < 0.8.35
• —@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCE
  from 0, < 0.8.24