Vulnerabilities in GCHQ
4 resultsCVE-2025-25182CRITICALStroom Authentication/Authorization Bypass when using AWS ALBEPSS 0.7%CVE-2026-72912MEDIUMCyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URLEPSS 0.3%CVE-2026-42615HIGHGCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.EPSS 0.3%CVE-2026-57439MEDIUMCyberChef: Prototype pollution in Series Chart operationEPSS 0.1%