4.4
CVE-2026-22809
- EPSS 0.02%
- Veröffentlicht 13.01.2026 19:36:21
- Zuletzt bearbeitet 20.01.2026 16:49:02
- Quelle security-advisories@github.com
- CVE-Watchlists
- Unerledigt
Logintarteaucitron.js is a compliant and accessible cookie banner. Prior to 1.29.0, a Regular Expression Denial of Service (ReDoS) vulnerability was identified in tarteaucitron.js in the handling of the issuu_id parameter. This vulnerability is fixed in 1.29.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Amauri ≫ Tarteaucitronjs SwPlatformnode.js Version < 1.29.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.035 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| security-advisories@github.com | 4.4 | 0.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
|
CWE-1333 Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.