nyariv

Top products

The 13 most recently published vulnerabilities affecting nyariv.

• CVE-2026-43898SandboxJS: Sandbox escape via Function.caller leakage of internal call op10.0May 28, 2026
• CVE-2026-34217SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler7.2Apr 6, 2026
• CVE-2026-34211SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser7.5Apr 6, 2026
• CVE-2026-34208SandboxJS: Sandbox integrity escape10.0Apr 6, 2026
• CVE-2026-32723SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)4.7Mar 18, 2026
• CVE-2026-26954SandboxJS has a Sandbox Escape10.0Mar 13, 2026
• CVE-2026-25881@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)9.0Feb 9, 2026
• CVE-2026-25586SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution10.0Feb 6, 2026
• CVE-2026-25520SandboxJS has a Sandbox Escape10.0Feb 6, 2026
• CVE-2026-25587SandboxJS has a Sandbox Escape10.0Feb 6, 2026
• CVE-2026-25641SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses10.0Feb 6, 2026
• CVE-2026-25142SandboxJS Prototype Pollution -> Sandbox Escape -> RCE10.0Feb 2, 2026
• CVE-2026-23830SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor10.0Jan 27, 2026