TA
Product
Tarteaucitronjs
5
CVEs
0
On KEV
6.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 0
Watch
Add Tarteaucitronjs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31475 | 6.6 | Apr 7 | tarteaucitron.js allows prototype pollution via custom text injection Affected: before 1.20.1 |
| CVE-2025-31138 | 6.6 | Apr 7 | tarteaucitron.js allows UI manipulation via unrestricted CSS injection Affected: before 1.20.1 |
| CVE-2025-31476 | 4.8 | Apr 7 | tarteaucitron.js allows url scheme injection via unfiltered inputs Affected: before 1.20.1 |
| CVE-2026-22809 | 4.4 | Jan 13 | tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability Affected: before 1.29.0 |
| CVE-2025-48939 | 4.2 | Jul 3 | tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript Affected: before 1.22.0 |
Showing 5