Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•0 views

CVE-2026-25881: Improperly Controlled Modification of Object Prototype Attributes

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.31, a sandbox escape vulnerability allows sandboxed code to mutate host built-in prototypes by laundering the isGlobal protection flag through array literal intermediaries. When a global prototype reference e.g., Map.prototype,...

10CVSS8.5AI score0.00638EPSS
SaveExploits1References1
Rows per page
Query Builder