CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

Finance.js vulnerable to DoS via the seekZero() parameter

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

GHSA-5Q7Q-P8PC-782H Finance.js vulnerable to DoS via the seekZero() parameter

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

PT-2025-40001

Name of the Vulnerable Software and Affected Versions finance.js version 4.1.0 Description An issue allows a remote attacker to cause a denial of service via the seekZero parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-40038

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

CVE-2025-56572

The finance.js JavaScript library (version 4.1.0 ) is vulnerable to a Denial of Service (DoS) attack. The root cause is the allocation of resources without limits or throttling ; specifically, the seekZero() function lacks iteration limits, and the IRR() function fails to properly handle the dept...