Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-57439
5
MEDIUMCVSS v3
Published
July 8, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while parsing user-supplied CSV, allowing prototype pollution that can be chained with operations such as Parse UDP to inject malicious JavaScript into HTML output. This issue is fixed in version 11.2.0.
gchq/CyberChef
GitHubThe Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
GitHubThe Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysisNVD