Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 41
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C237 Java183 PHP41 Rust14 Python11 Go9 C#4 Ruby2 C++1 Perl1

🛡 Vulnerabilities tagged with this 2,645

ID Title
CVE-2026-55388 Vulnerability in piscina (CVE-2026-55388)
CVE-2026-55746 Cross-Site Scripting (XSS) in cotonti/cotonti (CVE-2026-55746)
CVE-2026-9860 Unrestricted File Upload in wordpress (CVE-2026-9860)
CVE-2026-48768 Path Traversal in CVE-2026-48768 (CVE-2026-48768)
CVE-2026-54386 Cross-Site Scripting (XSS) in marimo (CVE-2026-54386)
CVE-2026-48821 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-48821)
CVE-2026-48823 Cross-Site Scripting (XSS) in CVE-2026-48823 (CVE-2026-48823)
CVE-2026-48822 Cross-Site Scripting (XSS) in CVE-2026-48822 (CVE-2026-48822)
CVE-2026-48814 Vulnerability in network-ai (CVE-2026-48814)
CVE-2026-55517 Vulnerability in deno (CVE-2026-55517)
CVE-2026-55409 Cross-Site Scripting (XSS) in filament/forms (CVE-2026-55409)
CVE-2026-48591 Cross-Site Scripting (XSS) in earmark (CVE-2026-48591)
CVE-2025-26240 Vulnerability in pdfkit (CVE-2025-26240)
CVE-2026-10850 Cross-Site Scripting (XSS) in plane (CVE-2026-10850)
CVE-2026-9570 Cross-Site Scripting (XSS) in wordpress (CVE-2026-9570)
CVE-2026-27870 Cross-Site Scripting (XSS) in CVE-2026-27870 (CVE-2026-27870)
CVE-2026-11975 Cross-Site Scripting (XSS) in CVE-2026-11975 (CVE-2026-11975)
CVE-2026-54011 Cross-Site Scripting (XSS) in open-webui (CVE-2026-54011)
CVE-2026-54325 Vulnerability in @earendil-works/pi-coding-agent (CVE-2026-54325)
CVE-2026-48788 Vulnerability in github.com/umputun/remark42 (CVE-2026-48788)
CVE-2026-54309 Vulnerability in n8n (CVE-2026-54309)
CVE-2026-54302 Cross-Site Scripting (XSS) in n8n (CVE-2026-54302)
CVE-2026-12425 Cross-Site Scripting (XSS) in powerschool (CVE-2026-12425)
CVE-2026-53864 OpenClaw: Host environment sanitizer missed two Node.js control variables
CVE-2026-53841 Cross-Site Scripting (XSS) in openclaw (CVE-2026-53841)
CVE-2026-49401 Vulnerability in deno (CVE-2026-49401)
CVE-2026-49406 Path Traversal in deno (CVE-2026-49406)
CVE-2026-49411 Vulnerability in deno (CVE-2026-49411)
CVE-2026-49440 Vulnerability in deno (CVE-2026-49440)
CVE-2026-49402 OS Command Injection in deno (CVE-2026-49402)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →