10 matches found
CVE-2025-56572
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...
Finance.js vulnerable to DoS via the seekZero() parameter
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...
GHSA-5Q7Q-P8PC-782H Finance.js vulnerable to DoS via the seekZero() parameter
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...
CVE-2025-56572
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...
CVE-2025-56572
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...
CVE-2025-56572
The finance.js JavaScript library (version 4.1.0 ) is vulnerable to a Denial of Service (DoS) attack. The root cause is the allocation of resources without limits or throttling ; specifically, the seekZero() function lacks iteration limits, and the IRR() function fails to properly handle the dept...
PT-2025-40001
Name of the Vulnerable Software and Affected Versions finance.js version 4.1.0 Description An issue allows a remote attacker to cause a denial of service via the seekZero parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2025-40038
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...
