GitHub Advisoryadvisory · PyPI

GHSA-r67w-f99w-mgxj ReDoS in Embedchain

MEDIUM Published 2024-01-21 Modified 2024-01-22 Official page ↗

Aliases: CVE-2024-23732
Ecosystem: PyPI
Packages: embedchain
Severity: Moderate
Weaknesses: CWE-1333
Reviewed: 2024-01-22

Affected packages

• PyPI embedchain: < 0.1.57 → fixed in 0.1.57

Description

The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.

Related

Alias · CVE (1)

CVE-2024-23732 The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py. vulnerability

Weakness · CWE (1)

CWE-1333 Inefficient Regular Expression Complexity weakness

References