fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.
References
Configurations
History
11 Oct 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
CWE | CWE-400 |
11 Sep 2024, 16:09
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-1333 | |
First Time |
Fast-xml-parser Project
Fast-xml-parser Project fast-xml-parser |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CPE | cpe:2.3:a:fast-xml-parser_project:fast-xml-parser:4.2.4:*:*:*:*:node.js:*:* | |
References | () https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/src/v5/valueParsers/currency.js#L10 - Issue Tracking | |
References | () https://github.com/NaturalIntelligence/fast-xml-parser/commit/d0bfe8a3a2813a185f39591bbef222212d856164 - Patch | |
References | () https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-mpg4-rc92-vx8v - Exploit, Vendor Advisory |
02 Aug 2024, 20:17
Type | Values Removed | Values Added |
---|---|---|
CWE | ||
Summary |
|
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
29 Jul 2024, 16:21
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-29 16:15
Updated : 2024-10-11 15:15
NVD link : CVE-2024-41818
Mitre link : CVE-2024-41818
CVE.ORG link : CVE-2024-41818
JSON object : View
Products Affected
fast-xml-parser_project
- fast-xml-parser