Amauri Tarteaucitronjs — known CVE vulnerabilities

Every CVE whose affected-product data names Amauri Tarteaucitronjs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-31138 — CVSS 5.5 (medium): tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where…
• CVE-2025-31475 — CVSS 5.5 (medium): tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the…
• CVE-2025-31476 — CVSS 4.8 (medium): tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowing a user with high…
• CVE-2026-22809 — CVSS 4.4 (medium): tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability…
• CVE-2025-48939 — CVSS 4.2 (medium): tarteaucitron.js is a compliant and accessible cookie banner. Prior to version 1.22.0, a vulnerability was identified in tarteaucitron.js…