Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.x	✅

Reporting a Vulnerability

Please report any security vulnerabilities to amauri@tarteaucitron.io I'll get back to you within 24 hours and fix the issue asap.

DOM Clobbering via document.currentScript
GHSA-q43x-79jr-cq98 published Jul 3, 2025 by AmauriC

Moderate
UI manipulation via unrestricted CSS injection
GHSA-7524-3396-fqv3 published Apr 7, 2025 by AmauriC

Moderate
Prototype pollution via custom text injection
GHSA-4hwx-xcc5-2hfc published Apr 7, 2025 by AmauriC

Moderate
Url scheme injection via unfiltered inputs
GHSA-p5g4-v748-6fh8 published Apr 7, 2025 by AmauriC

Moderate

Learn more about advisories related to AmauriC/tarteaucitron.js in the GitHub Advisory Database