CVE-2024-41818

Description

fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.

Affected Platforms

Weakness Type

CWE-400, CWE-1333

References

• https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/src/v5/valueP…
• https://github.com/NaturalIntelligence/fast-xml-parser/commit/ba5f35e7680468acd7…
• https://github.com/NaturalIntelligence/fast-xml-parser/commit/d0bfe8a3a2813a185f…
• https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-…
• https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/src/v5/valueP…
• https://github.com/NaturalIntelligence/fast-xml-parser/commit/d0bfe8a3a2813a185f…