TA
Product
tarteaucitron.js
by AmauriC · last CVE Oct 16, 2026
8
CVEs
0
On KEV
6.6
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 7Low 1
Watch

Add tarteaucitron.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111714
3.1
0%
Oct 16
tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge
Affected: before 1.37.0
Showing 1