Beveiligingsadvies

CVE-2026-34211

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 15:10:42

Laatst bijgewerkt 2026-04-07 14:09:53

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

SandboxJS is a JavaScript sandboxing library. Prior to 0.8.36, the @nyariv/sandboxjs parser contains unbounded recursion in the restOfExp function and the lispify/lispifyExpr call chain. An attacker can crash any Node.js process that parses untrusted input by supplying deeply nested expressions (e.g., ~2000 nested parentheses), causing a RangeError: Maximum call stack size exceeded that terminates the process. This vulnerability is fixed in 0.8.36.

← Alle CVE's bekijken Bekijk op cve.org ↗