Skip to content
OpenAdvisories

Vendor

nyariv

14 known vulnerabilities.

Products

SandboxJS 14
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2025-34146

    nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS

    A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code. This can result in a denial-of-service (DoS) condition or, under certain c…

    nyariv SandboxJS @nyariv/sandboxjs npm