npm @nyariv/sandboxjs

Name: npm @nyariv/sandboxjs
Brand: npm

productUS

pkg:npm/%40nyariv/sandboxjs

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

3critical1high1medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-23830US	—	1.22% (69th)	Exploit	0.8.26	2026-01-28	< 0.8.26
CVE-2026-25142US	—	1.23% (69th)	—	0.8.27	2026-02-02	< 0.8.27
CVE-2026-25520US	—	0.86% (58th)	—	0.8.29	2026-02-06	< 0.8.29
CVE-2026-25587US	—	0.71% (53rd)	—	0.8.29	2026-02-06	< 0.8.29
CVE-2026-25586US	—	0.70% (53rd)	—	0.8.29	2026-02-06	< 0.8.29
CVE-2026-25881US	critical10.0	0.62% (50th)	—	0.8.31	2026-02-09	< 0.8.31
CVE-2026-34208US	critical10.0	0.56% (47th)	—	0.8.36	2026-04-06	< 0.8.36
CVE-2026-26954US	—	0.56% (46th)	—	0.8.34	2026-03-13	< 0.8.34
CVE-2026-25641US	critical9.0	0.53% (45th)	—	0.8.29	2026-02-06	< 0.8.29
CVE-2026-43898US	—	0.47% (41st)	—	0.9.6	2026-05-28	< 0.9.6
CVE-2026-34211US	—	0.40% (34th)	—	0.8.36	2026-04-06	< 0.8.36
CVE-2026-34217US	high7.2	0.29% (22nd)	—	0.8.36	2026-04-06	< 0.8.36
CVE-2025-34146US	—	0.23% (14th)	—	0.8.24	2025-07-31	< 0.8.24
CVE-2026-32723US	medium4.7	0.15% (4th)	—	0.8.35	2026-03-18	< 0.8.35

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')5 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')4 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')3 CVEs
CWE-693Protection Mechanism Failure2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition1 CVEs
CWE-668Exposure of Resource to Wrong Sphere1 CVEs
CWE-674Uncontrolled Recursion1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.