Nashorn Sandbox vulnerabilities

1 known vulnerability in Nashorn Sandbox from Javadelight. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Nashorn Sandbox: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-26919Apr 10, 2023Javadelight

  delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to invoke the exit and quit methods to exit the Java process.