Skip to content

@nyariv/sandboxjs vulnerable to sandbox escape via TOCTOU bug on keys in property accesses

Critical severity GitHub Reviewed Published Feb 5, 2026 in nyariv/SandboxJS • Updated Feb 6, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts