CVE-2026-25881
1 advisory.
npm/@nyariv/sandboxjs CVE-2026-25881: critical 9
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
Action: Upgrade @nyariv/sandboxjs to 0.8.31 or later.
npm i @nyariv/sandboxjs@0.8.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.31 | - |
Fixed versions
| 0.8.31 |
Sources
- osv: GHSA-ww7g-4gwx-m7wj
- https://github.com/nyariv/SandboxJS/security/advisories/GHSA-ww7g-4gwx-m7wj
- https://nvd.nist.gov/vuln/detail/CVE-2026-25881
- https://github.com/nyariv/SandboxJS/commit/f369f8db26649f212a6a9a2e7a1624cb2f705b53
- https://github.com/nyariv/SandboxJS
CVE-2026-25881 · published · modified · JSON