Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
Start for Free
npm

tarteaucitronjs

View on npm registry
8 Total advisories
8 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 4.3
npm

CVE-2026-49977

tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies
MEDIUM 4.4
npm

CVE-2026-22809

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
MEDIUM 4.8
npm

CVE-2025-31476

tarteaucitron.js allows url scheme injection via unfiltered inputs
MEDIUM 4.2
npm

CVE-2025-48939

tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript
MEDIUM 5.5
npm

CVE-2025-31138

tarteaucitron.js allows UI manipulation via unrestricted CSS injection
MEDIUM 5.5
npm

CVE-2025-31475

tarteaucitron.js allows prototype pollution via custom text injection
MEDIUM 6.1
npm

CVE-2025-1467

tarteaucitron Cross-site Scripting (XSS)
MEDIUM 4.6
npm

CVE-2023-3620

tarteaucitron.js vulnerable to Cross-site Scripting

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes