Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 41
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C237 Java183 PHP41 Rust14 Python11 Go9 C#4 Ruby2 C++1 Perl1

🛡 Vulnerabilities tagged with this 2,646

ID Title
CVE-2026-34986 Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986)
CVE-2025-68709 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2025-68709)
CVE-2026-9566 Cross-Site Scripting (XSS) in CVE-2026-9566 (CVE-2026-9566)
CVE-2026-46624 OS Command Injection in sqli (CVE-2026-46624)
CVE-2026-44667 Cross-Site Scripting (XSS) in CVE-2026-44667 (CVE-2026-44667)
CVE-2026-44669 Cross-Site Scripting (XSS) in CVE-2026-44669 (CVE-2026-44669)
CVE-2026-39964 Cross-Site Scripting (XSS) in @typebot.io/js (CVE-2026-39964)
CVE-2026-28445 Cross-Site Scripting (XSS) in @typebot.io/js (CVE-2026-28445)
CVE-2026-44729 Cross-Site Scripting (XSS) in twenty (CVE-2026-44729)
CVE-2025-36148 Cross-Site Scripting (XSS) in ibm (CVE-2025-36148)
CVE-2025-36126 Cross-Site Scripting (XSS) in ibm (CVE-2025-36126)
CVE-2026-9520 Cross-Site Scripting (XSS) in blitz (CVE-2026-9520)
CVE-2026-9358 Vulnerability in dos (CVE-2026-9358)
CVE-2026-8353 Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8353)
CVE-2026-47138 Vulnerability in parse-server (CVE-2026-47138)
CVE-2026-39970 Cross-Site Scripting (XSS) in CVE-2026-39970 (CVE-2026-39970)
CVE-2026-33712 Vulnerability in ssrf (CVE-2026-33712)
CVE-2026-3481 Cross-Site Scripting (XSS) in wordpress (CVE-2026-3481)
CVE-2026-46701 Vulnerability in network-ai (CVE-2026-46701)
CVE-2026-4093 Cross-Site Scripting (XSS) in drupal (CVE-2026-4093)
CVE-2026-22678 Cross-Site Scripting (XSS) in webmin (CVE-2026-22678)
CVE-2026-46681 Vulnerability in @nevware21/ts-utils (CVE-2026-46681)
CVE-2026-46679 Vulnerability in @libp2p/gossipsub (CVE-2026-46679)
CVE-2026-8203 Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8203)
CVE-2026-46637 Vulnerability in twig/markdown-extra (CVE-2026-46637)
CVE-2026-46625 Vulnerability in js-cookie (CVE-2026-46625)
CVE-2026-46547 Cross-Site Scripting (XSS) in nocodb (CVE-2026-46547)
CVE-2026-48223 Cross-Site Scripting (XSS) in CVE-2026-48223 (CVE-2026-48223)
CVE-2026-48224 Cross-Site Scripting (XSS) in CVE-2026-48224 (CVE-2026-48224)
CVE-2026-48216 Cross-Site Scripting (XSS) in CVE-2026-48216 (CVE-2026-48216)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →