What’s Vulnerable › Products

AmauriC tarteaucitron.js vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your AmauriC tarteaucitron.js version is affected

Latest AmauriC tarteaucitron.js vulnerabilities

• CVE-2026-111714 — tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge (CVSS 3.1)
• CVE-2026-111713 — tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch (CVSS 5.4)
• CVE-2026-49977 — tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies (CVSS 4.3)