NY
Vendor
nyariv
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-43898 | SA SandboxJS nyariv | 10.0 | May 28 | SandboxJS: Sandbox escape via Function.caller leakage of internal call op |
| CVE-2026-34217 | SA SandboxJS nyariv | 7.2 | Apr 6 | SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler |
| CVE-2026-34211 | SA SandboxJS nyariv | 7.5 | Apr 6 | SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser |
| CVE-2026-34208 | SA SandboxJS nyariv | 10.0 | Apr 6 | SandboxJS: Sandbox integrity escape |
| CVE-2026-32723 | SA SandboxJS nyariv | 4.7 | Mar 18 | SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race) |
| CVE-2026-26954 | SA SandboxJS nyariv | 10.0 | Mar 13 | SandboxJS has a Sandbox Escape |
| CVE-2026-25881 | SA SandboxJS nyariv | 10.0 | Feb 9 | @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape) |
| CVE-2026-25586 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution |
| CVE-2026-25520 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape |
| CVE-2026-25587 | SA SandboxJS nyariv | 10.0 | Feb 6 | SandboxJS has a Sandbox Escape |
| CVE-2026-25641 | SA SandboxJS nyariv | 9.0 | Feb 6 | SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses |
| CVE-2026-25142 | SA SandboxJS nyariv | 10.0 | Feb 2 | SandboxJS Prototype Pollution -> Sandbox Escape -> RCE |
| CVE-2026-23830 | SA SandboxJS nyariv | 10.0 | Jan 27 | SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor |
| CVE-2025-34146 | SA sandboxjs nyariv | 7.0 | Jul 31 | nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS |