GHSA-f44m-65h3-99vc

GitHub Security Advisory

tarteaucitron.js vulnerable to Cross-site Scripting

✓ GitHub Reviewed MODERATE Has CVE

Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1.

npm tarteaucitronjs

Affected versions: 0 (fixed in 1.13.1)

CVE-2023-3620

GHSA ID

GHSA-f44m-65h3-99vc

Published

July 11, 2023 3:31 PM

Last Modified

July 11, 2023 10:45 PM

CVSS Score

5.0 /10

Primary Ecosystem

npm

Primary Package

tarteaucitronjs

GitHub Reviewed

✓ Yes

Last updated: July 28, 2025 6:37 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.