tarteaucitronjs
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| tarteaucitron.js allows url scheme injection via unfiltered inputs | drupal/tacjstarteaucitronjs | Composernpm | Medium | Fix reported | |
| tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies | tarteaucitronjs | npm | Medium | Fix reported | |
| tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability | tarteaucitronjs | npm | Medium | Fix reported | |
| tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript | tarteaucitronjs | npm | Medium | Fix reported | |
| tarteaucitron.js allows UI manipulation via unrestricted CSS injection | tarteaucitronjs | npm | Medium | Fix reported | |
| tarteaucitron.js allows prototype pollution via custom text injection | tarteaucitronjs | npm | Medium | Fix reported | |
| tarteaucitron.js vulnerable to Cross-site Scripting | tarteaucitronjswp-tarteaucitron-js-self-hosted | npmWordPress | Medium | Fix reported | |
| tarteaucitron Cross-site Scripting (XSS) | tarteaucitronjs | npm | Low | Fix reported |