Lucene search
+L

2 matches found

OSV
OSV
added 2026/02/10 12:24 a.m.4 views

GHSA-WW7G-4GWX-M7WJ @nyariv/sandboxjs has host prototype pollution from sandbox via array intermediary (sandbox escape)

Summary A sandbox escape vulnerability allows sandboxed code to mutate host built-in prototypes by laundering the isGlobal protection flag through array literal intermediaries. When a global prototype reference e.g., Map.prototype, Set.prototype is placed into an array and retrieved, the isGlobal...

9CVSS5.8AI score0.00552EPSS
SaveExploits1References4
Rows per page
Query Builder