Skip to content

SandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor

Critical severity GitHub Reviewed Published Jan 27, 2026 in nyariv/SandboxJS • Updated Jan 29, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts