https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:20:20.523943+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 certfr-2024-avi-0873 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T11:20:20.541479+00:00 certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-195083 EUVD-2026-195083 2026-10-03T11:20:20.541527+00:00 EUVD-2026-195083 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41818 fkie_cve-2024-41818 2026-10-03T11:20:20.541542+00:00

fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.

 https://cve.radiocsirt.org/vuln/ghsa-mpg4-rc92-vx8v GHSA-mpg4-rc92-vx8v — fast-xml-parser vulnerable to ReDOS at currency parsing 2026-10-03T11:20:20.541570+00:00

Affected: npm: fast-xml-parser

### Summary A ReDOS that exists on currency.js was discovered by Gauss Security Labs R&D team.

### Details https://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.0/src/v5/valueParsers/currency.js#L10 contains a vulnerable regex

### PoC pass the following string '\t'.repeat(13337) + '.'

### Impact Denial of service during currency parsing in experimental version 5 of fast-xml-parser-library

https://gauss-security.com

 https://cve.radiocsirt.org/vuln/rhba-2024:5958 RHBA-2024:5958 — Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.3 bugfix release 2026-10-03T11:20:20.541599+00:00

fast-xml-parser: ReDOS at currency parsing in currency.js