CyberChef has a Cross-site Scripting issue

ALTO 7.2CVE-2026-42615 · GHSA-h4hv-92pp-pcjg · Published 29/04/2026 · updated 24/07/2026

Em resumo

CVE-2026-42615 é uma vulnerabilidade ALTO (CVSS 7.2) que afeta cyberchef.
Chance de exploração nos próximos 30 dias (EPSS): 0.29%, maior que 22.2% das vulnerabilidades.
Correção: atualize para 11.0.0 ou posterior.

Package	Affected versions	Patched versions
cyberchef npm	`< 11.0.0`	`11.0.0`

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

NVD description

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.