CVE-2026-32723 | nyariv SandboxJS up to 0.8.34 Timer Call currentTicks.current race condition (GHSA-7p5m-xrh7-769r)

A vulnerability was found in nyariv SandboxJS up to 0.8.34. It has been rated as problematic. Impacted is the function currentTicks.current of the component Timer Call Handler. This manipulation causes race condition.

This vulnerability is handled as CVE-2026-32723. It is possible to launch the attack on the local host. There is not any exploit available.

Upgrading the affected component is advised.