CyberChef has a Cross-site Scripting issue

ALTO 7.2CVE-2026-42615 · GHSA-h4hv-92pp-pcjg · Published 29/04/2026 · updated 24/07/2026

In breve

CVE-2026-42615 è una vulnerabilità ALTO (CVSS 7.2) che riguarda cyberchef.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 22.2% delle vulnerabilità.
Correzione: aggiornare a 11.0.0 o successiva.

Package	Affected versions	Patched versions
cyberchef npm	`< 11.0.0`	`11.0.0`

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

NVD description

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.