Sandboxjs
Vendor:
First CVE: Jul 31, 2025 · Active for under a year
14
Total CVEs
More Total CVEs than 92% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
9.0
Avg CVSS
Higher Avg CVSS than 84% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sandboxjs over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 31, 2025
11 months ago
Most Recent CVE
May 28, 2026
60 days ago
CVE Severity & Scoring
Sandboxjs14 CVEs
21%
71%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (14.3%)
Network12 (85.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (85.7%)
High2 (14.3%)
Unknown0 (0.0%)
User Interaction
None14 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (7.1%)
High0 (0.0%)
None13 (92.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-43898CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6, sandbox-defined functions expose Function.caller, allowing sandboxed code to recover the internal LispType.Call runtim | May 28, 2026 | 10.0 | 39 | NO | NO |
CVE-2026-34208CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, SandboxJS blocks direct assignment to global objects (for example Math.random = ...), but this protection can be bypa | Apr 6, 2026 | 10.0 | 35 | NO | NO |
CVE-2026-26954CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.34, it is possible to obtain arrays containing Function, which allows escaping the sandbox. Given an array containing Fun | Mar 13, 2026 | 10.0 | 34 | NO | NO |
CVE-2026-23830CRITICAL SandboxJS is a JavaScript sandboxing library. Versions prior to 0.8.26 have a sandbox escape vulnerability due to `AsyncFunction` not being isolated in `SandboxFunction`. The libra | Jan 28, 2026 | 10.0 | 34 | NO | NO |
CVE-2026-25586CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, a sandbox escape is possible by shadowing hasOwnProperty on a sandbox object, which disables prototype whitelist enfo | Feb 6, 2026 | 10.0 | 33 | NO | NO |
CVE-2026-25520CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, The return values of functions aren't wrapped. Object.values/Object.entries can be used to get an Array containing th | Feb 6, 2026 | 10.0 | 33 | NO | NO |
CVE-2026-25142CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.27, SanboxJS does not properly restrict __lookupGetter__ which can be used to obtain prototypes, which can be used for es | Feb 2, 2026 | 10.0 | 32 | NO | NO |
CVE-2026-25881CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to mutate host built-in prototypes by laundering the isGlobal pr | Feb 9, 2026 | 10.0 | 30 | NO | NO |
CVE-2026-25587CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, as Map is in SAFE_PROTOYPES, it's prototype can be obtained via Map.prototype. By overwriting Map.prototype.has the s | Feb 6, 2026 | 10.0 | 28 | NO | NO |
CVE-2026-25641CRITICAL SandboxJS is a JavaScript sandboxing library. Prior to 0.8.29, there is a sandbox escape vulnerability due to a mismatch between the key on which the validation is performed and th | Feb 6, 2026 | 9.0 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Sandboxjs
Top CWEs
Versions
No cataloged versions.