A ReDOS issue exists in the currency.js component of the fast-xml-parser library, specifically affecting the experimental version 5. This issue can cause a denial of service during currency parsing. The vulnerable code contains a regex in the currency.js file. To exploit this issue, an attacker can pass a specially crafted string, such as 't'.repeat(13337) + '.', which can lead to a denial of service.