TI-2025-22656 CVE-2025-31475 · GHSA-4hwx-xcc5-2hfc
tarteaucitron.js allows prototype pollution via custom text injection
Priority LOW 31
tarteaucitron.js is a compliant and accessible cookie banner.
AmauriC
Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
AmauriC records in CISA KEVNo AmauriC vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Tarteaucitronjs · all components
TI-2025-22399 CVE-2025-31138 · GHSA-7524-3396-fqv3
tarteaucitron.js allows UI manipulation via unrestricted CSS injection
Priority LOW 31
tarteaucitron.js is a compliant and accessible cookie banner.
TI-2025-22657 CVE-2025-31476 · GHSA-p5g4-v748-6fh8
tarteaucitron.js allows url scheme injection via unfiltered inputs
Priority LOW 22
tarteaucitron.js is a compliant and accessible cookie banner.
TI-2026-18326 CVE-2026-22809 · GHSA-q5f6-qxm2-mcqm
tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
Priority LOW 19
tarteaucitron.js is a compliant and accessible cookie banner.
TI-2025-31077 CVE-2025-48939 · GHSA-q43x-79jr-cq98
tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
Priority LOW 19
tarteaucitron.js is a compliant and accessible cookie banner.