Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-41818
7.5
HIGHCVSS v3
Published
July 29, 2024
Affected
2 projects
Assigned by
GitHub
Severity scale
010
Description
fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.
fast-xml-parser
NPMValidate XML, Parse XML, Build XML without C/C++ based libraries
NPMValidate XML, Parse XML, Build XML without C/C++ based libraries= 4.2.4, >= 4.3.5, < 4.4.1NVD
NaturalIntelligence/fast-xml-parser
GitHubValidate XML, Parse XML and Build XML rapidly without C/C++ based libraries and no callback.
GitHubValidate XML, Parse XML and Build XML rapidly without C/C++ based libraries and no callback.= 4.2.4, >= 4.3.5, < 4.4.1NVD