CVE-2026-26954 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.34, it is possible to obtain arrays containing Function, which allows escaping the sandbox. Given an…
Critical CVSS: 10.0

CVE-2026-26954

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.34, it is possible to obtain arrays containing Function, which allows escaping the sandbox. Given an array containing Function, and Object.fromEntries, it is possible to construct {[p]: Function} where p is any constructible property. This vulnerability is fixed in 0.8.34.
Vendor
Nyariv
Product
Sandboxjs
CWE
CWE-94
Yayın Tarihi
2026-03-13 19:54:31
Güncelleme
2026-03-17 20:13:06
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-94 Sandboxjs CRITICAL Nyariv 2026

Referanslar

https://github.com/nyariv/SandboxJS/security/advisories/GHSA-6r9f-759j-hjgv https://github.com/nyariv/SandboxJS/security/advisories/GHSA-6r9f-759j-hjgv