CVE-2026-22809

Published January 13th, 2026

View on NVD ↗

CVSS v3

4.4

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the issuu_id parameter. This vulnerability is fixed in 1.29.0.

AmauriC/tarteaucitron.js

Get a compliant and accessible cookie banner

GitHub

1.05K