npm/@nyariv/sandboxjs CVE-2025-34146: high, EPSS 0.23%
@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCE
Action: Upgrade @nyariv/sandboxjs to 0.8.24 or later.
npm i @nyariv/sandboxjs@0.8.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.24 | - |
Fixed versions
| 0.8.24 |
Sources
- osv: GHSA-9qm3-6qrr-c76m
- https://nvd.nist.gov/vuln/detail/CVE-2025-34146
- https://github.com/nyariv/SandboxJS/issues/31
- https://gist.github.com/Hagrid29/9df27829a491080f923c4f6b8518d7e3
- https://github.com/nyariv/SandboxJS
- https://www.npmjs.com/package/@nyariv/sandboxjs
- https://www.vulncheck.com/advisories/nyariv-sandboxjs-prototype-pollution-sandbox-escape-dos
CVE-2025-34146 · published · modified · JSON