Skip to content

SandboxJS has an execution-quota bypass (cross-sandbox currentTicks race) in SandboxJS timers

Moderate severity GitHub Reviewed Published Mar 14, 2026 in nyariv/SandboxJS • Updated Mar 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts