Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-22809 EUVD-2026-2021GHSA-q5f6-qxm2-mcqm

tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability

Published Jan 13, 2026 · Updated Jan 13, 2026 · Assigned by GitHub_M

Description

tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the issuu_id parameter. This vulnerability is fixed in 1.29.0.

Affected products

VendorProductAffectedFixed
AmauriC tarteaucitron.js < 1.29.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm tarteaucitronjs < 1.29.0 1.29.0 GHSA-q5f6-qxm2-mcqm

References