{"action":"Upgrade @nyariv/sandboxjs to 0.8.24 or later.","affected":[{"fixed":"0.8.24","introduced":"0"}],"component":"@nyariv/sandboxjs","cve_ids":["CVE-2025-34146"],"ecosystem":"npm","epss":0.00228,"exploited":false,"fixed_versions":["0.8.24"],"ghsa_id":"GHSA-9qm3-6qrr-c76m","id":"tcs_01M5KFGPJS0PJXAR3FZ7G6HG48","modified_at":"2025-07-31T19:42:17.060687Z","published_at":"2025-07-31T15:35:50Z","references":["https://osv.dev/vulnerability/GHSA-9qm3-6qrr-c76m","https://nvd.nist.gov/vuln/detail/CVE-2025-34146","https://github.com/nyariv/SandboxJS/issues/31","https://gist.github.com/Hagrid29/9df27829a491080f923c4f6b8518d7e3","https://github.com/nyariv/SandboxJS","https://www.npmjs.com/package/@nyariv/sandboxjs","https://www.vulncheck.com/advisories/nyariv-sandboxjs-prototype-pollution-sandbox-escape-dos"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-9qm3-6qrr-c76m","url":"https://osv.dev/vulnerability/GHSA-9qm3-6qrr-c76m"}],"summary":"@nyariv/sandboxjs has Prototype Pollution vulnerability that may lead to RCE"}