https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:56:42 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0873 https://cve.radiocsirt.org/vuln/euvd-2026-195083 EUVD-2026-195083 https://cve.radiocsirt.org/vuln/euvd-2026-195083 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41818 <p>fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.</p> <p>fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41818 https://cve.radiocsirt.org/vuln/ghsa-mpg4-rc92-vx8v <p><strong>Affected:</strong> npm: fast-xml-parser</p> <p>### Summary A ReDOS that exists on currency.js was discovered by Gauss Security Labs R&amp;D team.</p> <p>### Details https://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.0/src/v5/valueParsers/currency.js#L10 contains a vulnerable regex</p> <p>### PoC pass the following string &#39;\t&#39;.repeat(13337) + &#39;.&#39;</p> <p>### Impact Denial of service during currency parsing in experimental version 5 of fast-xml-parser-library</p> <p>https://gauss-security.com</p> <p><strong>Affected:</strong> npm: fast-xml-parser</p> <p>### Summary A ReDOS that exists on currency.js was discovered by Gauss Security Labs R&amp;D team.</p> <p>### Details https://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.0/src/v5/valueParsers/currency.js#L10 contains a vulnerable regex</p> <p>### PoC pass the following string &#39;\t&#39;.repeat(13337) + &#39;.&#39;</p> <p>### Impact Denial of service during currency parsing in experimental version 5 of fast-xml-parser-library</p> <p>https://gauss-security.com</p> https://cve.radiocsirt.org/vuln/ghsa-mpg4-rc92-vx8v https://cve.radiocsirt.org/vuln/rhba-2024:5958 <p>fast-xml-parser: ReDOS at currency parsing in currency.js</p> <p>fast-xml-parser: ReDOS at currency parsing in currency.js</p> https://cve.radiocsirt.org/vuln/rhba-2024:5958