Description
On 5 June 2026 CyberChef received a security vulnerability report from @hyuunnn detailing a vulnerability in the Series Chart operation, where malicious input could result in prototype pollution of the data structures outputted from the operation.
Recommendation
Update the cyberchef package to the latest compatible version. Followings are version details:
- Affected version(s): < 11.2.0
- Patched version(s): 11.2.0
References
Could your website be exposed too?
SmartScanner can check your website for CyberChef: Prototype pollution in Series Chart operation and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Deep Merge is Vulnerable to Prototype Pollution Through Lack of Sanitization - CVE-2026-6594
- Immutable is vulnerable to Prototype Pollution - CVE-2026-29063
- Jodit has prototype pollution via Jodit.configure() / ConfigMerge - CVE-2026-54756
- @tmlmobilidade/utils has prototype pollution in its setValueAtPath - CVE-2026-45325
You might also like:
See something that needs correcting? Let us knowUpdated September 24, 2026