Natural Intelligence fast-xml-parser 4.2.4
Approved changes feed: RSS · Atom
cpe:2.3:a:naturalintelligence:fast-xml-parser:4.2.4:*:*:*:*:*:*:*
part: a version: 4.2.4 update: *
| Vendor | Naturalintelligence (67b183a2-a657-59fe-a412-45ef22464732) |
|---|---|
| Product | Fast Xml Parser (06955b62-72cd-5b6a-a7ca-5bf7b7eb52ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/naturalintelligence/fast-xml-parser |
purl2cpe | 2026-06-01 10:11:40.151285 |
pkg:maven/org.webjars.npm/fast-xml-parser |
purl2cpe | 2026-06-01 10:11:40.151286 |
pkg:npm/fast-xml-parser |
purl2cpe | 2026-06-01 10:11:40.151287 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41818 |
vulnerable | 2026-06-08 06:43:55.276473 |
ReDOS at currency parsing fast-xml-parser
HIGH (7.5)
fast-xml-parser is an open source, pure javascript xml parser. a ReDOS exists on currency.js. This vulnerability is fixed in 4.4.1.
Published: 2024-07-29T15:56:38.999Z
Updated: 2024-10-11T14:13:27.572Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.