Description
SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFE_PROTOYPES, it's prototype can be obtained via Map.prototype. By overwriting Map.prototype.has the sandbox can be escaped. This vulnerability is fixed in 0.8.29.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| nyariv | SandboxJS | < 0.8.29 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @nyariv/sandboxjs | < 0.8.29 | 0.8.29 | GHSA-66h4-qj4x-38xp |