Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

nyariv — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting nyariv. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Nyariv is a software component primarily used for data processing and workflow automation in enterprise environments. Historically, it has been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, with 13 CVEs documented. Security researchers have identified consistent flaws in input validation and access control mechanisms. While no major public incidents have been widely reported, the accumulation of CVEs suggests potential risks in production environments. Organizations using Nyariv should prioritize timely patching and implement additional security controls, particularly for internet-facing deployments, to mitigate exploitation risks.

Top products by nyariv: sandboxjs
CVE ID Title CVSS Severity Published
CVE-2026-43898 SandboxJS: Sandbox escape via Function.caller leakage of internal call op — SandboxJS CWE-94 10.0 Critical 2026-05-28
CVE-2026-34217 SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler — SandboxJS CWE-668 9.3AI Critical AI 2026-04-06
CVE-2026-34211 SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser — SandboxJS CWE-674 7.5AI High AI 2026-04-06
CVE-2026-34208 SandboxJS: Sandbox integrity escape — SandboxJS CWE-693 10.0 Critical 2026-04-06
CVE-2026-32723 SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race) — SandboxJS CWE-362 9.8 - 2026-03-18
CVE-2026-26954 SandboxJS has a Sandbox Escape — SandboxJS CWE-94 10.0 Critical 2026-03-13
CVE-2026-25881 @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape) — SandboxJS CWE-1321 9.1 Critical 2026-02-09
CVE-2026-25586 SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution — SandboxJS CWE-74 10.0 Critical 2026-02-06
CVE-2026-25520 SandboxJS has a Sandbox Escape — SandboxJS CWE-74 10.0 Critical 2026-02-06
CVE-2026-25587 SandboxJS has a Sandbox Escape — SandboxJS CWE-94 10.0 Critical 2026-02-06
CVE-2026-25641 SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses — SandboxJS CWE-367 10.0 Critical 2026-02-06
CVE-2026-25142 SandboxJS Prototype Pollution -> Sandbox Escape -> RCE — SandboxJS CWE-94 10.0 Critical 2026-02-02
CVE-2026-23830 SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor — SandboxJS CWE-94 10.0 Critical 2026-01-27
CVE-2025-34146 nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS — sandboxjs CWE-1321 7.0 High 2025-07-31

This page lists every published CVE security advisory associated with nyariv. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.