Vulnerabilities

TI-2026-18326 CVE-2026-22809 · GHSA-q5f6-qxm2-mcqm

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

LOW 19

tarteaucitron.js is a compliant and accessible cookie banner.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00128 Published 2026-01-13 Fixed in 1.29.0 CWE-1333

TI-2025-31077 CVE-2025-48939 · GHSA-q43x-79jr-cq98

LOW 19

tarteaucitron.js is a compliant and accessible cookie banner.

CVSS 3.1MEDIUM 4.2 Local High privileges User interaction EPSS 0.00202 Published 2025-07-03 Fixed in 1.22.0 CWE-138

TI-2025-22657 CVE-2025-31476 · GHSA-p5g4-v748-6fh8

LOW 22

tarteaucitron.js is a compliant and accessible cookie banner.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0036 Published 2025-04-07 Fixed in 1.20.1 CWE-79

TI-2025-22656 CVE-2025-31475 · GHSA-4hwx-xcc5-2hfc

LOW 31

tarteaucitron.js is a compliant and accessible cookie banner.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00351 Published 2025-04-07 Fixed in 1.20.1 CWE-1321

TI-2025-22399 CVE-2025-31138 · GHSA-7524-3396-fqv3

LOW 31

tarteaucitron.js is a compliant and accessible cookie banner.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00271 Published 2025-04-07 Fixed in 1.20.1 CWE-1021