Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SandboxJS — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in SandboxJS, with AI-generated Chinese analysis, references, and POCs.

Vendor: nyariv

CVE IDTitleCVSSSeverityPublished
CVE-2026-34217 SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler CWE-668 9.3AICriticalAI2026-04-06
CVE-2026-34211 SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser CWE-674 7.5AIHighAI2026-04-06
CVE-2026-34208 SandboxJS: Sandbox integrity escape CWE-693 10.0 Critical2026-04-06
CVE-2026-32723 SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race) CWE-362 9.8 -2026-03-18
CVE-2026-26954 SandboxJS has a Sandbox Escape CWE-94 10.0 Critical2026-03-13
CVE-2026-25881 @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape) CWE-1321 9.1 Critical2026-02-09
CVE-2026-25586 SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution CWE-74 10.0 Critical2026-02-06
CVE-2026-25520 SandboxJS has a Sandbox Escape CWE-74 10.0 Critical2026-02-06
CVE-2026-25587 SandboxJS has a Sandbox Escape CWE-94 10.0 Critical2026-02-06
CVE-2026-25641 SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses CWE-367 10.0 Critical2026-02-06
CVE-2026-25142 SandboxJS Prototype Pollution -> Sandbox Escape -> RCE CWE-94 10.0 Critical2026-02-02
CVE-2026-23830 SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor CWE-94 10.0 Critical2026-01-27
CVE-2025-34146 nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS CWE-1321 9.8AICriticalAI2025-07-31

All 13 known CVE vulnerabilities affecting SandboxJS with full Chinese analysis, references, and POCs where available.