Login Request a demo
SA
Product
sandboxjs
by nyariv · last CVE May 28, 2026
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 10High 3Medium 1Low 0
Severity
All severities14Critical10High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add sandboxjs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-43898
10.0
0%
May 28
SandboxJS: Sandbox escape via Function.caller leakage of internal call op
Affected: < 0.9.6
CVE-2026-34208
10.0
1%
Apr 6
SandboxJS: Sandbox integrity escape
Affected: < 0.8.36
CVE-2026-26954
10.0
1%
Mar 13
SandboxJS has a Sandbox Escape
Affected: < 0.8.34
CVE-2026-25881
10.0
1%
Feb 9
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
Affected: < 0.8.31
CVE-2026-25586
10.0
1%
Feb 6
SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution
Affected: < 0.8.29
CVE-2026-25520
10.0
1%
Feb 6
SandboxJS has a Sandbox Escape
Affected: < 0.8.29
CVE-2026-25587
10.0
1%
Feb 6
SandboxJS has a Sandbox Escape
Affected: < 0.8.29
CVE-2026-25142
10.0
1%
Feb 2
SandboxJS Prototype Pollution -> Sandbox Escape -> RCE
Affected: < 0.8.27
CVE-2026-23830
10.0
1%
Jan 27
SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
Affected: < 0.8.26
CVE-2026-25641
9.0
1%
Feb 6
SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses
Affected: < 0.8.29
Showing 10