Security Advisory

CVE-2026-57439

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-08 14:58:38

Last updated 2026-07-08 16:12:28

Assigner GitHub_M

CVSS score 5.0

State PUBLISHED

Description

CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while parsing user-supplied CSV, allowing prototype pollution that can be chained with operations such as Parse UDP to inject malicious JavaScript into HTML output. This issue is fixed in version 11.2.0.

← Browse all CVEs View on cve.org ↗