CVE-2025-56572

The finance.js JavaScript library (version 4.1.0 ) is vulnerable to a Denial of Service (DoS) attack. The root cause is the allocation of resources without limits or throttling ; specifically, the seekZero() function lacks iteration limits, and the IRR() function fails to properly handle the dept...