CVE Feed

    Dashboard / CVE / CVE-2024-41818

    CVE-2024-41818

    fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.

    Published:Jul 28, 2024
    Last Modified:Mar 9, 2026
    EPS:Jul 29, 2024
    EPSS Score:0.00685
    CVSS Score:7.5

    Affected Products

    Vendor
    Naturalintelligence
    Product
    Fast-xml-parser
    Vendor
    Naturalintelligence
    Product
    Fast Xml Parser
    Vendor
    Redhat
    Product
    Container Native Virtualization
    Vendor
    Redhat
    Product
    Openshift Data Foundation

    Exploits

    https://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-mpg4-rc92-vx8vhttps://github.com/NaturalIntelligence/fast-xml-parser/security/advisories/GHSA-mpg4-rc92-vx8v

    Related CVEs

    CVE-2026-73569 (CVSS 8.7) — fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.…
    CVE-2026-41650 (CVSS 6.1) — fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Prior t…
    CVE-2026-33349 (CVSS 5.9) — fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From ve…
    CVE-2026-33036 (CVSS 7.5) — fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. Version…
    CVE-2026-27942 (CVSS 2.7) — fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C+…
    CVE-2026-25896 (CVSS 9.3) — fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C+…
    CVE-2026-26278 (CVSS 7.5) — fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C+…
    CVE-2026-25128 (CVSS 7.5) — fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C+…
    CVE-2023-34104 (CVSS 7.5) — fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in en…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High