From a0c8b877803e555787f7b7090673a39d9697626c Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 7 Oct 2024 19:58:21 +0000
Subject: [PATCH] Publish GHSA-mpg4-rc92-vx8v

---
 .../2024/07/GHSA-mpg4-rc92-vx8v/GHSA-mpg4-rc92-vx8v.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2024/07/GHSA-mpg4-rc92-vx8v/GHSA-mpg4-rc92-vx8v.json b/advisories/github-reviewed/2024/07/GHSA-mpg4-rc92-vx8v/GHSA-mpg4-rc92-vx8v.json
index 96e5e9e7291..531a7521916 100644
--- a/advisories/github-reviewed/2024/07/GHSA-mpg4-rc92-vx8v/GHSA-mpg4-rc92-vx8v.json
+++ b/advisories/github-reviewed/2024/07/GHSA-mpg4-rc92-vx8v/GHSA-mpg4-rc92-vx8v.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mpg4-rc92-vx8v",
-  "modified": "2024-07-29T19:47:36Z",
+  "modified": "2024-10-07T19:56:52Z",
   "published": "2024-07-29T17:46:16Z",
   "aliases": [
     "CVE-2024-41818"
   ],
   "summary": "fast-xml-parser vulnerable to ReDOS at currency parsing",
-  "details": "### Summary\nA ReDOS exists on currency.js  was discovered by Gauss Security Labs R&D team.\n\n### Details\nhttps://github.com/NaturalIntelligence/fast-xml-parser/blob/master/src/v5/valueParsers/currency.js#L10\ncontains a vulnerable regex \n\n### PoC\npass the following string '\\t'.repeat(13337)  + '.'\n\n### Impact\nDenial of service during currency parsing in experimental version 5 of fast-xml-parser-library\n\nhttps://gauss-security.com",
+  "details": "### Summary\nA ReDOS that exists on currency.js was discovered by Gauss Security Labs R&D team.\n\n### Details\nhttps://github.com/NaturalIntelligence/fast-xml-parser/blob/v4.4.0/src/v5/valueParsers/currency.js#L10 contains a vulnerable regex \n\n### PoC\npass the following string '\\t'.repeat(13337)  + '.'\n\n### Impact\nDenial of service during currency parsing in experimental version 5 of fast-xml-parser-library\n\nhttps://gauss-security.com",
   "severity": [
     {
       "type": "CVSS_V3",