Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2537▼ 360 respecto a la semana anterior
Críticas / altas1344▲ 80 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Media (4.3) | 0.32% | — | Gchq CyberchefAI | 10/8/2026 | 9/9/2026 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-recipe parser in src/core/Utils.mjs can exhaust client-side CPU when a malformed #recipe= URL fragment containing a large number of unmatched quote characters reaches Utils.parseRecipeConfig(). The… | |
| Aplazada | Media (5) | 0.24% | — | Gchq CyberchefAI | 8/7/2026 | 10/7/2026 | CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while parsing user-supplied CSV, allowing prototype pollution that can be chained with operations such as Parse UDP to inject malicious JavaScript into HTML output.… | |
| Pendiente de análisis | Alta (7.2) | 0.37% | — | Gchq CyberchefAI | 29/4/2026 | 24/7/2026 | GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring. | |
| Modificada | Media (6.1) | 1.3% | — | Gchq Cyberchef | 26/8/2019 | 17/6/2026 | CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs. |