Vulnerabilities in nyariv
14 resultsCVE-2026-23830CRITICALSandboxJS has Sandbox Escape via Unprotected AsyncFunction ConstructorEPSS 1.1%CVE-2026-25142CRITICALSandboxJS Prototype Pollution -> Sandbox Escape -> RCEEPSS 1.1%CVE-2026-25520CRITICALSandboxJS has a Sandbox EscapeEPSS 0.8%CVE-2026-25587CRITICALSandboxJS has a Sandbox EscapeEPSS 0.6%CVE-2026-25586CRITICALSandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype PollutionEPSS 0.6%CVE-2026-34208CRITICALSandboxJS: Sandbox integrity escapeEPSS 0.6%CVE-2026-25881CRITICAL@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)EPSS 0.6%CVE-2026-26954CRITICALSandboxJS has a Sandbox EscapeEPSS 0.5%CVE-2026-25641CRITICALSandboxJS has a sandbox escape via TOCTOU bug on keys in property accessesEPSS 0.5%CVE-2026-43898CRITICALSandboxJS: Sandbox escape via Function.caller leakage of internal call opEPSS 0.5%CVE-2026-34211MEDIUMSandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parserEPSS 0.4%CVE-2026-34217MEDIUMSandboxJS has a Sandbox Escape via Prop Object Leak in New HandlerEPSS 0.3%CVE-2025-34146HIGHnyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoSEPSS 0.2%CVE-2026-32723MEDIUMSandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)EPSS 0.1%