A vulnerability marked as problematic has been reported in nyariv SandboxJS up to 0.8.35. Affected is the function restOfExp. The manipulation leads to uncontrolled recursion. This vulnerability is documented as CVE-2026-34211. The attack can be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| nyariv | sandboxjs | < 0.8.36 |
Updated description with new details, changed severity to HIGH, set CVSS estimate to 7.5, and marked the vulnerability as actively exploited.
Initial creation
