【中文导读】Finance.js 存在拒绝服务风险(高危风险)。具体受影响版本、触发条件和修复方案以 NVD/厂商公告为准。 【原始描述】Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes.