Skip to main content

Excessive Iteration

CVE-2025-56571

High
7.5/10

Summary

Finance.js contains a Denial of Service (DoS) vulnerability via the 'IRR' functions 'depth' parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-834 - Excessive Iteration

The software performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

References

Advisory Timeline

  • Published