Advisories · Technology

AmauriC tarteaucitron.js.

Every CVE that names AmauriC tarteaucitron.js among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111714 CVE record

CVSS 2.3 Low

tarteaucitron.js before 1.37.0 ReDoS via Unescaped Cookie Name in cookie.purge
- AmauriC tarteaucitron.js
- Denial of service
Not analysed yet 16 Oct 2026
CVE-2026-111713 CVE record

CVSS 5.1 Medium

tarteaucitron.js before 1.37.0 XSS via getElemAttr Attribute Validation Mismatch
- AmauriC tarteaucitron.js
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2026