7.5
High
CVE-2024-41818 fast-xml-parser is an open source, pure javascript xml parser
Description
fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| fast-xml-parser 4.3 | 4.3.5 → < 4.4.1 | 4.4.1 |
| fast_xml_parser 4.4 | earliest → < 4.4.1 | 4.4.1 |
References
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of fast-xml-parser
The 10 CVEs of fast-xml-parser →
CVE-2026-73569
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
8.7
High
CVE-2026-41650
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
6.1
Medium
CVE-2026-33349
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
5.9
Medium
CVE-2026-33036
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
7.5
High