What is GHSA-r67w-f99w-mgxj?

GHSA-r67w-f99w-mgxj is a security advisory published by GitHub Security Advisories with Medium severity. ReDoS in Embedchain

Which CVE IDs does GHSA-r67w-f99w-mgxj cover?

GHSA-r67w-f99w-mgxj covers the following CVE IDs: CVE-2024-23732. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-r67w-f99w-mgxj?

GHSA-r67w-f99w-mgxj affects 1 product, including: pip/embedchain:\u003c 0.1.57.

GHSA-r67w-f99w-mgxjMedium

ReDoS in Embedchain

Vendor

GitHub Security Advisories

Published

January 21, 2024

Last Modified

January 22, 2024

🔗 CVE IDs covered (1)

CVE-2024-23732 →

📋 Description

The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.

🎯 Affected products1

pip/embedchain:< 0.1.57

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2024-23732
https://github.com/embedchain/embedchain/pull/1122
https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57
https://github.com/pypa/advisory-database/tree/main/vulns/embedchain/PYSEC-2024-8.yaml
https://github.com/advisories/GHSA-r67w-f99w-mgxj