Skip to content
OpenAdvisories

Vendor

GCHQ

4 known vulnerabilities.

Products

CyberChef 3 stroom 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-72912

    CyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL

    CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-recipe parser in src/core/Utils.mjs can exhaust client-side CPU when a malformed #recipe= URL fragment containing a large number of unmatched …

    GCHQ CyberChef
  • Medium 5.0
    CVE-2026-57439

    CyberChef: Prototype pollution in Series Chart operation

    CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while parsing user-supplied CSV, allowing prototype pollution that can be chained with operations such as P…

    GCHQ CyberChef cyberchef npm