Sign in Sign up
JA · EN · FR
SecPulse

JavaScript

💬 Programming Languages Related 4,144
slug: javascript

Explanation

JavaScriptはブラウザの中で動くプログラミング言語で、ボタンを押したときの動きやページの動的な変化を担当します。 近年は Node.js でサーバー側でも使われ、Webアプリ全体で最も使われている言語のひとつです。 脆弱性の文脈では XSS (クロスサイトスクリプティング) という、攻撃者がページに悪意あるスクリプトを混入させる攻撃が代表的です。
📌 Example
npmパッケージ event-stream の事件 (2018) では、人気ライブラリに悪意あるコードが仕込まれ、暗号通貨ウォレットからお金を盗むコードが世界中の Node.js アプリに混入した。

🔖 Related tags

C10302 PHP6016 Java1450 Python984 C++500 C#359 Rust225 Ruby201 Go108 Perl18 PowerShell8 PyTorch5 Swift3 Scala1 Shell1

🛡 Vulnerabilities tagged with this 4,204

Image ID Title
CVE-2026-34986 Vulnerability in github.com/go-jose/go-jose/v3 (CVE-2026-34986)
CVE-2025-68709 Cross-Site Scripting (XSS) in SailingLab AppLock (CVE-2025-68709)
CVE-2026-9566 Cross-Site Scripting (XSS) in teableio teable (CVE-2026-9566)
CVE-2026-46624 OS Command Injection in Twenty (CVE-2026-46624)
CVE-2026-44667 Cross-Site Scripting (XSS) in FACTION (CVE-2026-44667)
CVE-2026-44669 Cross-Site Scripting (XSS) in FACTION (CVE-2026-44669)
CVE-2026-39964 Cross-Site Scripting (XSS) in @typebot.io/js (CVE-2026-39964)
CVE-2026-28445 Cross-Site Scripting (XSS) in @typebot.io/js (CVE-2026-28445)
CVE-2026-44729 Cross-Site Scripting (XSS) in Twenty is an open source CRM. In (CVE-2026-44729)
CVE-2025-36148 Cross-Site Scripting (XSS) in Ibm Financial Transaction Manager For Multiplatform (CVE-2025-36148)
CVE-2025-36126 Cross-Site Scripting (XSS) in IBM Cognos Analytics (CVE-2025-36126)
CVE-2026-9520 Cross-Site Scripting (XSS) in blitz (CVE-2026-9520)
CVE-2026-9358 Vulnerability in postcss-selector-parser (CVE-2026-9358)
CVE-2026-8353 Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8353)
CVE-2026-47138 Vulnerability in parse-server (CVE-2026-47138)
CVE-2026-39970 Cross-Site Scripting (XSS) in TypeBot (CVE-2026-39970)
CVE-2026-33712 Vulnerability in Typebot (CVE-2026-33712)
CVE-2026-3481 Cross-Site Scripting (XSS) in WP Blockade (WordPress plugin) (CVE-2026-3481)
CVE-2026-46701 Vulnerability in network-ai (CVE-2026-46701)
CVE-2026-4093 Cross-Site Scripting (XSS) in Drupal Taxonomy Term Reference Tree Widget Project (CVE-2026-4093)
CVE-2026-22678 Cross-Site Scripting (XSS) in Webmin (CVE-2026-22678)
CVE-2026-46681 Vulnerability in @nevware21/ts-utils (CVE-2026-46681)
CVE-2026-46679 Vulnerability in @libp2p/gossipsub (CVE-2026-46679)
CVE-2026-8203 Cross-Site Scripting (XSS) in concrete5/concrete5 (CVE-2026-8203)
CVE-2026-46637 Vulnerability in twig/markdown-extra (CVE-2026-46637)
CVE-2026-46625 Vulnerability in js-cookie (CVE-2026-46625)
CVE-2026-46547 Cross-Site Scripting (XSS) in nocodb (CVE-2026-46547)
CVE-2026-48223 Cross-Site Scripting (XSS) in Open ISES Tickets (CVE-2026-48223)
CVE-2026-48224 Cross-Site Scripting (XSS) in Open ISES Tickets (CVE-2026-48224)
CVE-2026-48216 Cross-Site Scripting (XSS) in Open ISES Tickets (CVE-2026-48216)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details