Browse CVEs

CRITICAL 10.0 CVE-2026-43898 SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6, sandbox-defined functions expose Function.caller, allowing sandboxed code to recover th… Sandboxjs 0.9.6+ Fix from $2,3002026-05-28 CRITICAL 10.0 CVE-2026-34208 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects (for example Math.random = ...), … Sandboxjs 0.8.36+ Fix from $2,3002026-04-06 HIGH 7.5 CVE-2026-34211 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parser contains unbounded recursion in the restOfExp function an… Sandboxjs 0.8.36+ Fix from $1,9502026-04-06 HIGH 7.2 CVE-2026-34217 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulnerability exists in @nyariv/sandboxjs. The vulnerability allo… Sandboxjs 0.8.36+ Fix from $1,9502026-04-06 CRITICAL 10.0 CVE-2026-26954 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.34, it is possible to obtain arrays containing Function, which allows escaping the sandbox… Sandboxjs 0.8.34+ Fix from $2,3002026-03-13 CRITICAL 10.0 CVE-2026-25881 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to mutate host built-in prototype… Sandboxjs 0.8.31+ Fix from $2,3002026-02-09 CRITICAL 9.0 CVE-2026-25641 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch between the key on which the… Sandboxjs 0.8.29+ Fix from $2,3002026-02-06 CRITICAL 10.0 CVE-2026-25520 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be use… Sandboxjs 0.8.29+ Fix from $2,3002026-02-06 CRITICAL 10.0 CVE-2026-25586 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which di… Sandboxjs 0.8.29+ Fix from $2,3002026-02-06 CRITICAL 10.0 CVE-2026-25587 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFE_PROTOYPES, it's prototype can be obtained via Map.prototype. By over… Sandboxjs 0.8.29+ Fix from $2,3002026-02-06 CRITICAL 10.0 CVE-2026-25142 SandboxJS is a JavaScript sandboxing library. Prior to 0.8.27, SanboxJS does not properly restrict __lookupGetter__ which can be used to obtain proto… Sandboxjs 0.8.27+ Fix from $2,3002026-02-02 CRITICAL 10.0 CVE-2026-23830 SandboxJS is a JavaScript sandboxing library. Versions prior to 0.8.26 have a sandbox escape vulnerability due to `AsyncFunction` not being isolated … Sandboxjs 0.8.26+ Fix from $2,3002026-01-28