tarteaucitronjs vulnerabilities (npm)

8 vulnerabilities.

• tarteaucitronjs npm tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies CVE-2026-49977 Fix available 4.3 MediumJune 3, 2026
• tarteaucitronjs npm tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability CVE-2026-22809 Fix available 4.4 MediumJanuary 13, 2026
• tarteaucitronjs npm tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript CVE-2025-48939 Fix available 4.2 MediumJuly 3, 2025
• tarteaucitronjs npm tarteaucitron.js allows prototype pollution via custom text injection CVE-2025-31475 Fix available 5.5 MediumApril 7, 2025
• tarteaucitronjs npm tarteaucitron.js allows UI manipulation via unrestricted CSS injection CVE-2025-31138 Fix available 5.5 MediumApril 7, 2025
• tarteaucitronjs npm tarteaucitron.js allows url scheme injection via unfiltered inputs CVE-2025-31476 Fix available 4.8 MediumApril 2, 2025
• tarteaucitronjs npm tarteaucitron Cross-site Scripting (XSS) CVE-2025-1467 Fix available 5.1 MediumFebruary 23, 2025
• tarteaucitronjs npm Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js CVE-2023-3620 Fix available 4.6 MediumJuly 11, 2023