Skip to contentAmauri Tarteaucitronjs vulnerabilities
- amauric tarteaucitron.js, amauri tarteaucitronjs +1 moretarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerabilityCVE-2026-22809Fix available4.4 Medium
- amauric tarteaucitron.js, amauri tarteaucitronjs +1 moretarteaucitron.js vulnerable to DOM Clobbering via document.currentScriptCVE-2025-48939Fix available4.2 Medium
- amauric tarteaucitron.js, amauri tarteaucitronjs +1 moretarteaucitron.js allows prototype pollution via custom text injectionCVE-2025-31475Fix available5.5 Medium
- amauric tarteaucitron.js, amauri tarteaucitronjs +1 moretarteaucitron.js allows UI manipulation via unrestricted CSS injectionCVE-2025-31138Fix available5.5 Medium
- amauric tarteaucitron.js, amauri tarteaucitronjs, tacjs project tacjs +2 moretarteaucitron.js allows url scheme injection via unfiltered inputsCVE-2025-31476Fix available4.8 Medium