Nyariv
6 CVEs tracked since 2026. Since Feb 2026, none of them reached CISA KEV.
Nyariv CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-02 | 6 | 0 |
Products
The products that kept showing up in Nyariv's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 14 most recently published vulnerabilities affecting Nyariv.
- CVE-2026-43898SandboxJS: Sandbox escape via Function.caller leakage of internal call op10.0
- CVE-2026-34217SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler7.2
- CVE-2026-34211SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser7.5
- CVE-2026-34208SandboxJS: Sandbox integrity escape10.0
- CVE-2026-32723SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)4.7
- CVE-2026-26954SandboxJS has a Sandbox Escape10.0
- CVE-2026-25881@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)9.0
- CVE-2026-25586SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution10.0
- CVE-2026-25520SandboxJS has a Sandbox Escape10.0
- CVE-2026-25587SandboxJS has a Sandbox Escape10.0
- CVE-2026-25641SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses10.0
- CVE-2026-25142SandboxJS Prototype Pollution -> Sandbox Escape -> RCE10.0
- CVE-2026-23830SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor10.0
- CVE-2025-34146nyariv sandboxjs 0.8.23 Prototype Pollution Sandbox Escape DoS—
The record
- Peak rank
- #178 in Feb 2026
- Busiest month shown
- Feb 2026, 6 CVEs
- Months with a KEV entry
- 0 since Feb 2026
- Monthly snapshots
- 1 since 2026