npm/@nyariv/sandboxjs CVE-2026-34211: high 7.5, EPSS 0.40%

SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser

Action: Upgrade @nyariv/sandboxjs to 0.8.36 or later.

npm i @nyariv/sandboxjs@0.8.36

Affected

Fixed versions

Sources

• osv: GHSA-8pfc-jjgw-6g26
• nvd: CVE-2026-34211
• https://github.com/nyariv/SandboxJS/security/advisories/GHSA-8pfc-jjgw-6g26
• https://github.com/nyariv/SandboxJS

CVE-2026-34211 · published 2026-04-03T21:45:14Z · modified 2026-04-06T23:34:44.531035Z · JSON