CVE-2025-56572: Ebradyjobory Finance.js

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.

Affected products

• Ebradyjobory Finance.js: version 4.1.0 only

Published 2025-09-30. Last modified 2026-07-05.