{"id":"CVE-2026-34217","revision":"2bb778819b714984af85cbeaaea33c11","records":[{"revision":"2bb778819b714984af85cbeaaea33c11","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-34217","aliases":[],"title":"SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler","description":"SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulnerability exists in @nyariv/sandboxjs. The vulnerability allows untrusted sandboxed code to leak internal interpreter objects through the new operator, exposing sandbox scope objects in the scope hierarchy to untrusted code; an unexpected and undesired exploit. While this could allow modifying scopes inside the sandbox, code evaluation remains sandboxed and prototypes remain protected throughout the execution. This vulnerability is fixed in 0.8.36.","state":0,"publishedAt":"2026-04-06T15:12:52.871+00:00","modifiedAt":"2026-04-06T15:40:46.653+00:00","affected":[{"ecosystem":"Vendor product","name":"SandboxJS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"nyariv\",\n                    \"product\": \"SandboxJS\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 0.8.36\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","score":6.9,"severity":"MEDIUM"}],"references":["https://github.com/nyariv/SandboxJS/security/advisories/GHSA-hg73-4w7g-q96w"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-34217","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-34217","identifiers":["CVE-2026-34217"]},"retained":false,"historicalAffected":[]}],"coverage":[]}