Skip to content

CVE-2026-42615

CVE-2026-42615

This page contains facts from public vulnerability sources. Check the original advisory before updating.

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

CVSS 7.2 · High · EPSS 0.3% · Fix available

Published: 2026-04-29T02:55:53.171Z
Updated: 2026-04-29T13:14:40.068Z

Stack: node

Affected products and versions

cyberchef
Versions
- ≥ 0, < 11.0.0: Affected (semver)
Update to 11.0.0
cyberchef npm
Affected ranges
- SEMVER: < 11.0.0
Update to 11.0.0

Original sources

Check your server →