Advisories · Technology

gchq CyberChef.

Every CVE that names gchq CyberChef among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-72912 CVE record

CVSS 4.3 Medium

CyberChef’s pretty-recipe parser vulnerable to client-side ReDoS / CPU exhaustion when parsing a malformed #recipe= URL
- gchq CyberChef
- Denial of service
Not analysed yet 10 Aug 2026