CVE Catalog
CVE-2025-56572
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.50%
39th percentile - higher than 39% of all known CVEs
Summary
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.
Risk Assessment
An attacker can remotely overload the application using finance.js, leading to service unavailability for users.
Recommendation
Update the finance.js library to the latest available version that includes a fix for this vulnerability.
Other vulnerabilities in finance.js
Original NVD description (English source)
An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.