8
CVEs
8
Critical
0
High
0
KEV
7
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
8
HIGH
0
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (1)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-23830 | SandboxJS library prior to 0.8.26 has a CVSS 10.0 sandbox escape via AsyncFunction constructor, allowing execution of arbitrary code outside the sandbox boundary. | CRITICAL | 10.0 | 0.2% | 70 |
PoC
|
| CVE-2026-25142 | Sandbox escape in SandboxJS before 0.8.27 via __lookupGetter__ prototype chain access. CVSS 10.0 — complete sandbox bypass. PoC and patch available. | CRITICAL | 10.0 | 0.2% | 70 |
PoC
|
| CVE-2026-25520 | SandboxJS has a second CVSS 10.0 sandbox escape where function return values aren't properly sanitized, allowing code execution outside the sandbox. | CRITICAL | 10.0 | 0.0% | 70 |
PoC
|
| CVE-2026-25586 | SandboxJS has a third CVSS 10.0 sandbox escape via Map prototype shadowing that allows complete sandbox bypass. | CRITICAL | 10.0 | 0.0% | 70 |
PoC
|
| CVE-2026-25587 | SandboxJS has a fourth CVSS 10.0 sandbox escape through Map's safe prototype being used as a gateway to inject arbitrary code. | CRITICAL | 10.0 | 0.0% | 70 |
PoC
|
| CVE-2026-25641 | SandboxJS has a fifth CVSS 10.0 escape via a TOCTOU race condition in sandbox validation, allowing code to slip through during the check-execute gap. | CRITICAL | 10.0 | 0.0% | 70 |
PoC
|
| CVE-2026-25881 | SandboxJS prior to 0.8.31 has yet another sandbox escape via prototype pollution, the sixth distinct escape technique discovered. | CRITICAL | 9.0 | 0.1% | 65 |
PoC
|
| CVE-2026-26954 | SandboxJS sandbox escape before 0.8.34 via Function access through arrays. CVSS 10.0. | CRITICAL | 10.0 | 0.0% | 50 |
|