Login Request a demo
SA
Product
sandboxjs
by nyariv · last CVE May 28, 2026
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 10High 3Medium 1Low 0
Severity
All severities14Critical10High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add sandboxjs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-43898
10.0
0%
May 28
SandboxJS: Sandbox escape via Function.caller leakage of internal call op
Affected: < 0.9.6
CVE-2026-34208
10.0
1%
Apr 6
SandboxJS: Sandbox integrity escape
Affected: < 0.8.36
CVE-2026-26954
10.0
1%
Mar 13
SandboxJS has a Sandbox Escape
Affected: < 0.8.34
CVE-2026-25881
10.0
1%
Feb 9
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.31
CVE-2026-25587
10.0
1%
Feb 6
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.29
CVE-2026-25586
10.0
1%
Feb 6
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.29
CVE-2026-25520
10.0
1%
Feb 6
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.29
CVE-2026-25142
10.0
1%
Feb 2
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.27
CVE-2026-23830
10.0
1%
Jan 28
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.26
CVE-2026-25641
9.0
1%
Feb 6
SandboxJS is a JavaScript sandboxing library
Affected: before 0.8.29
CVE-2026-34211
7.5
0%
Apr 6
SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
Affected: < 0.8.36
CVE-2026-34217
7.2
0%
Apr 6
SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler
Affected: < 0.8.36
CVE-2025-34146
7.0
0%
Jul 31
nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS
Affected: through 0.8.23
CVE-2026-32723
4.7
0%
Mar 18
SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)
Affected: < 0.8.35
Showing 14