CVE-2026-111714 | AmauriC tarteaucitron.js up to 1.36.x Cookie Purge cookie.purge redos

October 16, 2026 Yanac

A vulnerability labeled as problematic has been found in AmauriC tarteaucitron.js up to 1.36.x. This issue affects the function cookie.purge of the file tarteaucitron.js of the component Cookie Purge. Executing a manipulation can lead to inefficient regular expression complexity.

This vulnerability is registered as CVE-2026-111714. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More