nyariv SandboxJS

• CVE-2026-43898 Critical 10.0 SandboxJS: Sandbox escape via Function.caller leakage of internal call op 0.5%
• CVE-2026-34217 Medium 6.9 SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler 0.3%
• CVE-2026-34211 High 7.5 SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser 0.4%
• CVE-2026-34208 Critical 10.0 SandboxJS: Sandbox integrity escape 0.6%
• CVE-2026-32723 Medium 4.8 SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race) 0.2%
• CVE-2026-26954 Critical 10.0 SandboxJS has a Sandbox Escape 0.6%
• CVE-2026-25881 Critical 9.1 @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape) 0.6%
• CVE-2026-25586 Critical 10.0 SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution 0.7%
• CVE-2026-25520 Critical 10.0 SandboxJS has a Sandbox Escape 0.9%
• CVE-2026-25587 Critical 10.0 SandboxJS has a Sandbox Escape 0.7%
• CVE-2026-25641 Critical 10.0 SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses 0.5%
• CVE-2026-25142 Critical 10.0 SandboxJS Prototype Pollution -> Sandbox Escape -> RCE 1.2%
• CVE-2026-23830 Critical 10.0 SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor 1.2%
• CVE-2025-34146 High 7.0 nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS 0.2%