TI-2026-51128 CVE-2026-72912
CyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL
Priority LOW 20
CyberChef is a web app for encryption, encoding, compression, and data analysis.
Vulnerabilities
7 records
TI-2026-41376 CVE-2026-57439 · GHSA-fx6f-382r-j72c
CyberChef: Prototype pollution in Series Chart operation
Priority MEDIUM 56
CyberChef is a web app for encryption, encoding, compression, and data analysis.
TI-2026-30894 CVE-2026-42615 · GHSA-h4hv-92pp-pcjg
Cross-site scripting in gchq CyberChef
Priority LOW 31
GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.
Priority MEDIUM 50
Stroom is a data processing, storage and analysis platform.
TI-2019-08044 CVE-2019-10779
Cross-site scripting in stroom:stroom-app
Priority LOW 29
All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting.
TI-2019-11632 CVE-2019-15532 · GHSA-jp6r-xcjj-5h7r
CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
Priority LOW 30
CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
TI-2018-16004 CVE-2018-1000651 · GHSA-7wwr-6qph-hrh6
Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser…
Priority MEDIUM 47
Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning.