Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-42615

GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.

VectorNETWORK

PublishedApr 29, 2026, 04:16

Published Bycve@mitre.org

Base Score

Score7.2

Package (Ecosystem)IntroducedFixedLimit

cyberchef(npm)011.0.0N/A

CWE-79

Base Score

7.2

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK