nyariv kayıtları
nyariv üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-94 Improper Control of Generation of Code ('Code Injection')5
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-668 Exposure of Resource to Wrong Sphere1
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1
- CWE-693 Protection Mechanism Failure1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-23830Kavram kanıtı | SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructornyariv · sandboxjs · CWE-94 | Kritik10,0 | — | %1,2 | 27 Oca 2026 |
40Planlayın | CVE-2026-25142İstismar yok | SandboxJS Prototype Pollution -> Sandbox Escape -> RCEnyariv · sandboxjs · CWE-94 | Kritik10,0 | — | %1,2 | 2 Şub 2026 |
40Planlayın | CVE-2026-25520İstismar yok | SandboxJS has a Sandbox Escapenyariv · sandboxjs · CWE-74 | Kritik10,0 | — | %0,8 | 6 Şub 2026 |
40Planlayın | CVE-2026-25587İstismar yok | SandboxJS has a Sandbox Escapenyariv · sandboxjs · CWE-94 | Kritik10,0 | — | %0,7 | 6 Şub 2026 |
40Planlayın | CVE-2026-25586İstismar yok | SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollutionnyariv · sandboxjs · CWE-74 | Kritik10,0 | — | %0,7 | 6 Şub 2026 |
40Planlayın | CVE-2026-25881İstismar yok | @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)nyariv · sandboxjs · CWE-1321 | Kritik10,0 | — | %0,6 | 9 Şub 2026 |
40Planlayın | CVE-2026-26954İstismar yok | SandboxJS has a Sandbox Escapenyariv · sandboxjs · CWE-94 | Kritik10,0 | — | %0,5 | 13 Mar 2026 |
40Planlayın | CVE-2026-34208İstismar yok | SandboxJS: Sandbox integrity escapenyariv · sandboxjs · CWE-693 | Kritik10,0 | — | %0,5 | 6 Nis 2026 |
40Planlayın | CVE-2026-43898İstismar yok | SandboxJS: Sandbox escape via Function.caller leakage of internal call opnyariv · sandboxjs · CWE-94 | Kritik10,0 | — | %0,4 | 28 May 2026 |
36İzleyin | CVE-2026-25641İstismar yok | SandboxJS has a sandbox escape via TOCTOU bug on keys in property accessesnyariv · sandboxjs · CWE-367 | Kritik9,0 | — | %0,5 | 6 Şub 2026 |
27İzleyin | CVE-2026-34211İstismar yok | SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parsernyariv · sandboxjs · CWE-674 | Orta6,9 | — | %0,3 | 6 Nis 2026 |
27İzleyin | CVE-2026-34217İstismar yok | SandboxJS has a Sandbox Escape via Prop Object Leak in New Handlernyariv · sandboxjs · CWE-668 | Orta6,9 | — | %0,2 | 6 Nis 2026 |
19İzleyin | CVE-2026-32723İstismar yok | SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)nyariv · sandboxjs · CWE-362 | Orta4,8 | — | %0,1 | 18 Mar 2026 |
- CVE-2026-2383040Planlayın
SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor
KritikCVSS 10,0Kavram kanıtıEPSS %1nyariv · sandboxjs27 Oca 2026
- CVE-2026-2514240Planlayın
SandboxJS Prototype Pollution -> Sandbox Escape -> RCE
KritikCVSS 10,0İstismar yokEPSS %1nyariv · sandboxjs2 Şub 2026
- CVE-2026-2552040Planlayın
SandboxJS has a Sandbox Escape
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs6 Şub 2026
- CVE-2026-2558740Planlayın
SandboxJS has a Sandbox Escape
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs6 Şub 2026
- CVE-2026-2558640Planlayın
SandboxJS has a Sandbox Escape via Prototype Whitelist Bypass and Host Prototype Pollution
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs6 Şub 2026
- CVE-2026-2588140Planlayın
@nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs9 Şub 2026
- CVE-2026-2695440Planlayın
SandboxJS has a Sandbox Escape
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs13 Mar 2026
- CVE-2026-3420840Planlayın
SandboxJS: Sandbox integrity escape
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs6 Nis 2026
- CVE-2026-4389840Planlayın
SandboxJS: Sandbox escape via Function.caller leakage of internal call op
KritikCVSS 10,0İstismar yokEPSS %0nyariv · sandboxjs28 May 2026
- CVE-2026-2564136İzleyin
SandboxJS has a sandbox escape via TOCTOU bug on keys in property accesses
KritikCVSS 9,0İstismar yokEPSS %0nyariv · sandboxjs6 Şub 2026
- CVE-2026-3421127İzleyin
SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
OrtaCVSS 6,9İstismar yokEPSS %0nyariv · sandboxjs6 Nis 2026
- CVE-2026-3421727İzleyin
SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler
OrtaCVSS 6,9İstismar yokEPSS %0nyariv · sandboxjs6 Nis 2026
- CVE-2026-3272319İzleyin
SandboxJS timers have an execution-quota bypass (cross-sandbox currentTicks race)
OrtaCVSS 4,8İstismar yokEPSS %0nyariv · sandboxjs18 Mar 2026