Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2026-22809

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

Description

tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the issuu_id parameter. This vulnerability is fixed in 1.29.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AmauriC tarteaucitron.js

  • < 1.29.0affected

References