Gchq

3 CVEs across 2 Gchq products. Browse Gchq vulnerabilities, severities, and proof-of-concept exploits.

Gchq products with known CVEs

ProductCVEs
Cyberchef4
Stroom3
Gchq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-72912Medium4.32026-08-10CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.3.0, CyberChef's pretty-recipe parser in src/core/Utils.mjs can ex…
CVE-2026-57439Medium5.02026-07-08CyberChef is a web app for encryption, encoding, compression, and data analysis. Prior to 11.2.0, the Series Chart operation accepts __proto__ as a key while p…
CVE-2026-42615High7.22026-04-29GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.
CVE-2025-25182Critical9.42025-02-12Stroom is a data processing, storage and analysis platform. A vulnerability exists starting in version 7.2-beta.53 and prior to versions 7.2.24, 7.3-beta.22, 7…
CVE-2019-10779Medium6.12020-01-28All versions of stroom:stroom-app before 5.5.12 and all versions of the 6.0.0 branch before 6.0.25 are affected by Cross-site Scripting. An attacker website is…
CVE-2019-15532Medium6.12019-08-26CyberChef before 8.31.2 allows XSS in core/operations/TextEncodingBruteForce.mjs.
CVE-2018-1000651Critical10.02018-08-20Stroom version <5.4.5 contains a XML External Entity (XXE) vulnerability in XML Parser that can result in disclosure of confidential data, denial of service, s…