{"id":"EUVD-2026-19301","enisaUuid":"61b8d3db-bb58-37f9-bbd3-bc2a60de5f2a","description":"SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulnerability exists in @nyariv/sandboxjs. The vulnerability allows untrusted sandboxed code to leak internal interpreter objects through the new operator, exposing sandbox scope objects in the scope hierarchy to untrusted code; an unexpected and undesired exploit. While this could allow modifying scopes inside the sandbox, code evaluation remains sandboxed and prototypes remain protected throughout the execution. This vulnerability is fixed in 0.8.36.","datePublished":"Apr 6, 2026, 3:12:52 PM","dateUpdated":"Apr 6, 2026, 3:40:46 PM","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/nyariv/SandboxJS/security/advisories/GHSA-hg73-4w7g-q96w\n","aliases":"CVE-2026-34217\nGHSA-hg73-4w7g-q96w\n","assigner":"GitHub_M","epss":0.29,"enisaIdProduct":[{"id":"512e1f69-ca63-33c1-b388-379a69b2f842","product":{"name":"sandboxjs","vendor":{"name":"nyariv"}},"product_version":"\u003c 0.8.36"}],"enisaIdVendor":[{"id":"4f3b4f81-07f9-31c4-a0e2-288eb9dd1835","vendor":{"name":"nyariv"}}],"enisaIdVulnerability":[{"id":"804da82c-1f50-3f93-bee4-be33f65ae034","vulnerability":{"id":"CVE-2026-34217","description":"SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, a scope modification vulnerability exists in @nyariv/sandboxjs. The vulnerability allows untrusted sandboxed code to leak internal interpreter objects through the new operator, exposing sandbox scope objects in the scope hierarchy to untrusted code; an unexpected and undesired exploit. While this could allow modifying scopes inside the sandbox, code evaluation remains sandboxed and prototypes remain protected throughout the execution. This vulnerability is fixed in 0.8.36.","datePublished":"Apr 6, 2026, 3:12:52 PM","dateUpdated":"Apr 6, 2026, 3:40:46 PM","status":"PUBLISHED","baseScore":6.9,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/nyariv/SandboxJS/security/advisories/GHSA-hg73-4w7g-q96w\n","enisa_id":"EUVD-2026-19301\n","assigner":"GitHub_M","epss":0.29,"dataProcessed":"Oct 27, 2026, 7:19:10 AM","vulnerabilityProduct":[{"id":"3b9af3e6-46a0-3e44-bc7a-fc9b6b61a594","product":{"name":"sandboxjs","vendor":{"name":"nyariv"}},"product_version":"\u003c 0.8.36"}],"vulnerabilityVendor":[{"id":"2c2626d5-f49a-3d73-aa25-d79e4fd6ffbf","vendor":{"name":"nyariv"}}]}},{"id":"98dbe367-c69d-3f8b-8459-edef4401a59b","vulnerability":{"id":"GHSA-hg73-4w7g-q96w","description":"SandboxJS: Sandbox Escape via Prop Object Leak in New Handler","datePublished":"Apr 3, 2026, 9:45:38 PM","dateUpdated":"Apr 6, 2026, 11:18:33 PM","baseScore":0.0,"references":"https://github.com/nyariv/SandboxJS/security/advisories/GHSA-hg73-4w7g-q96w\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-34217\nhttps://github.com/nyariv/SandboxJS/commit/abc02f657279e51a4aaad2bc8f99f3e37a01b287\nhttps://github.com/nyariv/SandboxJS\n","enisa_id":"EUVD-2026-19301\n","aliases":"CVE-2026-34217\nGHSA-hg73-4w7g-q96w\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:55:10 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}