CyberChef
v11.5.0The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 5 advisories1 high, 4 medium · Scorecard 6.8/10
- Supported versions
- No scheduleendoflife.date does not track this project
36.4k stars · 4.2k forks · 589 open issues · last release 1 month ago · data checked 3 hours ago
Security advisories
All advisories on GitHubThe 5 most recent advisories published by the maintainers: 1 high, 4 medium. Check the patched version against the one you run.
- highGHSA-444r-v5rp-3xwmSep 18, 2026Shared URL auto-runs `HTTP request`, forcing requests from the victim's browser
- Affected
- >= 9.0.0, <= 11.4.0
- Patched in
- 11.5.0
- mediumGHSA-hjwj-84x5-h7grAug 29, 2026Denial of Service Vulnerability in CyberChef
- Affected
- <11.1.1; < 11.1.1
- Patched in
- 11.1.1
- mediumGHSA-gp3c-3939-33f7Aug 29, 2026Reflected XSS via Regular Expression in CyberChef <= 11.3.0
- Affected
- 11.3.0
- Patched in
- 11.4.0
- mediumCVE-2026-72912Aug 5, 2026CyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL
- Affected
- <=11.2.0
- Patched in
- 11.3.0
- mediumCVE-2026-57439Jun 24, 2026Prototype pollution in Series Chart operation
- Affected
- < 11.2.0
- Patched in
- 11.2.0