CVE-2026-26954
1 advisory.
npm/@nyariv/sandboxjs CVE-2026-26954: critical 10, EPSS 0.62%
SandboxJS affected by a Sandbox Escape
Action: Upgrade @nyariv/sandboxjs to 0.8.34 or later.
npm i @nyariv/sandboxjs@0.8.34Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.34 | - |
Fixed versions
| 0.8.34 |
Sources
- osv: GHSA-6r9f-759j-hjgv
- https://github.com/nyariv/SandboxJS/security/advisories/GHSA-6r9f-759j-hjgv
- https://nvd.nist.gov/vuln/detail/CVE-2026-26954
- https://github.com/nyariv/SandboxJS/commit/e01505b1ea49f4f13956cd12b7ce01b83d2ee085
- https://github.com/nyariv/SandboxJS
- https://github.com/nyariv/SandboxJS/releases/tag/v0.8.34
CVE-2026-26954 · published · modified · JSON