nyariv has 2 CVEs on record between 2025 and 2026. The median CVSS is 8.5 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.5
Publish → KEV: —
Last 90 days: 0 prev 1

Weakness classes

Products

sandboxjs 2

Follow nyariv:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

CVE-2026-43898Critical· 10.0SandboxJS is a JavaScript sandboxing library55
CVE-2025-34146High· 7.0A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code51

nyariv vulnerabilities

CVEs affecting nyariv, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-43898Critical· 10.0

5mo ago

SandboxJS is a JavaScript sandboxing library

SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6, sandbox-defined functions expose Function.caller, allowing sandboxed code to recover the internal LispType.Call runtime callback. That callback can then be invoked with attack…

▾ Midnightnyariv · sandboxjsEPSS 0.47%via NVD

CVE-2025-34146High· 7.0PoC

1y ago

A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code

A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code. This can result in a denial-of-service (DoS) conditi…

▾ Midnightnyariv · sandboxjsEPSS 0.23%via NVD