Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 41
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C237 Java183 PHP41 Rust14 Python11 Go9 C#4 Ruby2 C++1 Perl1

🛡 Vulnerabilities tagged with this 2,645

ID Title
CVE-2026-48619 Vulnerability in node (CVE-2026-48619)
CVE-2026-48930 Vulnerability in node (CVE-2026-48930)
CVE-2026-48618 Vulnerability in nodejs (CVE-2026-48618)
CVE-2026-9086 Cross-Site Scripting (XSS) in redhat (CVE-2026-9086)
CVE-2026-55413 Code Injection in CVE-2026-55413 (CVE-2026-55413)
CVE-2026-56054 Subscriber Arbitrary File Deletion in JS Help Desk <= 3.1.1 versions.
CVE-2026-57532 Vulnerability in CVE-2026-57532 (CVE-2026-57532)
CVE-2026-10712 Cross-Site Scripting (XSS) in gitlab (CVE-2026-10712)
CVE-2026-13311 Vulnerability in shell-quote (CVE-2026-13311)
CVE-2026-39900 Cross-Site Scripting (XSS) in cacti (CVE-2026-39900)
CVE-2026-54067 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54067)
CVE-2026-54158 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54158)
CVE-2026-54070 Cross-Site Scripting (XSS) in github.com/siyuan-note/siyuan/kernel (CVE-2026-54070)
CVE-2026-11998 Vulnerability in angular (CVE-2026-11998)
CVE-2026-47733 Cross-Site Scripting (XSS) in CVE-2026-47733 (CVE-2026-47733)
CVE-2026-53945 Vulnerability in ghost (CVE-2026-53945)
CVE-2026-53947 Vulnerability in ghost (CVE-2026-53947)
CVE-2026-53946 SSRF (Server-Side Request Forgery) in ghost (CVE-2026-53946)
CVE-2026-53948 Unrestricted File Upload in ghost (CVE-2026-53948)
CVE-2026-53949 Information Disclosure in ghost (CVE-2026-53949)
CVE-2026-53950 Cross-Site Scripting (XSS) in @tryghost/activitypub (CVE-2026-53950)
CVE-2026-53944 Vulnerability in ghost (CVE-2026-53944)
CVE-2026-53943 Vulnerability in ghost (CVE-2026-53943)
CVE-2026-49220 Cross-Site Scripting (XSS) in CVE-2026-49220 (CVE-2026-49220)
CVE-2026-50699 Cross-Site Scripting (XSS) in CVE-2026-50699 (CVE-2026-50699)
CVE-2026-13163 Open Redirect in c (CVE-2026-13163)
CVE-2026-9183 Information Disclosure in wordpress (CVE-2026-9183)
CVE-2026-10091 Cross-Site Scripting (XSS) in wordpress (CVE-2026-10091)
CVE-2026-54639 Style Dictionary - Prototype Pollution in convertTokenData utility function
CVE-2026-56785 Cross-Site Scripting (XSS) in CVE-2026-56785 (CVE-2026-56785)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →