← Back

CVE-2026-22809

nvd nist
Published: Jan 13, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 0.8 / Impact: 3.6
Source: security-advisories@github.com (Secondary)

Description

tarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the issuu_id parameter. This vulnerability is fixed in 1.29.0.

Affected (1)

Amauri
1 product
Tarteaucitronjs
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Tarteaucitronjs
Before 1.29.0

Related CWEs

CWE-1333
Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

References (2)

Source: security-advisories@github.com
Patch
Source: security-advisories@github.com
PatchVendor Advisory

Timeline

No history available yet.