Description
SandboxJS is a JavaScript sandboxing library. Prior to 0.9.6, sandbox-defined functions expose Function.caller, allowing sandboxed code to recover the internal LispType.Call runtime callback. That callback can then be invoked with attacker-controlled fake context and obj values to extract blocked host statics, recover the real host Function constructor, and execute arbitrary host JavaScript. This vulnerability is fixed in 0.9.6.
Affected products
nyariv: sandboxjs
References3
- github.com/nyariv/SandboxJS/security/advisories/GHSA-g8f2-4f4f-… ExploitVendor Advisory
- github.com/nyariv/SandboxJS/security/advisories/GHSA-g8f2-4f4f-… ExploitVendor Advisory
- github.com/nyariv/SandboxJS/commit/826865251232611ec94078bab5a1… Patch
Metrics
- CVSS 3.1
-
10.0
CRITICAL
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 41 · as of 15 November 2026
- CWE
- CWE-94
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.