Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 41
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C237 Java183 PHP41 Rust14 Python11 Go9 C#4 Ruby2 C++1 Perl1

🛡 Vulnerabilities tagged with this 1,570

ID Title
CVE-2026-56397 Cross-Site Scripting (XSS) in CVE-2026-56397 (CVE-2026-56397)
CVE-2026-56383 Cross-Site Scripting (XSS) in CVE-2026-56383 (CVE-2026-56383)
CVE-2026-56381 Cross-Site Scripting (XSS) in CVE-2026-56381 (CVE-2026-56381)
CVE-2026-56347 Cross-Site Scripting (XSS) in CVE-2026-56347 (CVE-2026-56347)
CVE-2025-71331 Vulnerability in flowiseai (CVE-2025-71331)
CVE-2026-55791 Cross-Site Scripting (XSS) in craftcms/cms (CVE-2026-55791)
CVE-2026-54074 Code Injection in @tinacms/cli (CVE-2026-54074)
CVE-2026-49293 Vulnerability in js-toml (CVE-2026-49293)
CVE-2026-12048 Cross-Site Scripting (XSS) in react (CVE-2026-12048)
CVE-2026-12047 Cross-Site Scripting (XSS) in react (CVE-2026-12047)
CVE-2026-12049 Open Redirect in pgadmin (CVE-2026-12049)
CVE-2026-22674 Cross-Site Scripting (XSS) in CVE-2026-22674 (CVE-2026-22674)
CVE-2026-48937 Vulnerability in CVE-2026-48937 (CVE-2026-48937)
CVE-2026-43915 Cross-Site Scripting (XSS) in coturn-project (CVE-2026-43915)
CVE-2026-48716 Path Traversal in CVE-2026-48716 (CVE-2026-48716)
CVE-2026-48617 Vulnerability in CVE-2026-48617 (CVE-2026-48617)
CVE-2026-55237 Vulnerability in CVE-2026-55237 (CVE-2026-55237)
CVE-2026-54221 Cross-Site Scripting (XSS) in CVE-2026-54221 (CVE-2026-54221)
CVE-2026-54219 Cross-Site Scripting (XSS) in CVE-2026-54219 (CVE-2026-54219)
CVE-2026-40457 Cross-Site Scripting (XSS) in CVE-2026-40457 (CVE-2026-40457)
CVE-2026-55661 Cross-Site Scripting (XSS) in tinacms (CVE-2026-55661)
CVE-2026-55603 Vulnerability in http-proxy-middleware (CVE-2026-55603)
CVE-2026-55602 Vulnerability in http-proxy-middleware (CVE-2026-55602)
CVE-2026-55388 Code Injection in piscina (CVE-2026-55388)
CVE-2026-55746 Cross-Site Scripting (XSS) in cotonti/cotonti (CVE-2026-55746)
CVE-2026-9860 Unrestricted File Upload in wordpress (CVE-2026-9860)
CVE-2026-48768 Path Traversal in CVE-2026-48768 (CVE-2026-48768)
CVE-2026-54386 Cross-Site Scripting (XSS) in marimo (CVE-2026-54386)
CVE-2026-48821 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2026-48821)
CVE-2026-48822 Cross-Site Scripting (XSS) in CVE-2026-48822 (CVE-2026-48822)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →