TI-2026-41376 CVE-2026-57439 · GHSA-fx6f-382r-j72c
CyberChef: Prototype pollution in Series Chart operation
Priority MEDIUM 56
CyberChef is a web app for encryption, encoding, compression, and data analysis.
gchq
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
gchq records in CISA KEVNo gchq vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
Priority MEDIUM 50
Stroom is a data processing, storage and analysis platform.
TI-2018-16004 CVE-2018-1000651 · GHSA-7wwr-6qph-hrh6
Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser…
Priority MEDIUM 47
Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning.
TI-2026-30894 CVE-2026-42615 · GHSA-h4hv-92pp-pcjg
Cross-site scripting in gchq CyberChef
Priority LOW 31
GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.
TI-2019-11632 CVE-2019-15532 · GHSA-jp6r-xcjj-5h7r
CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
Priority LOW 30
CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
TI-2019-08044 CVE-2019-10779
Cross-site scripting in stroom:stroom-app
Priority LOW 29
All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting.
TI-2026-51128 CVE-2026-72912
CyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL
Priority LOW 20
CyberChef is a web app for encryption, encoding, compression, and data analysis.