CVE-2024-41818: Naturalintelligence Fast-XML-Parser

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.

Affected products

• Naturalintelligence Fast-XML-Parser: version 4.2.4 only

Published 2024-07-29. Last modified 2026-06-17.