Description
The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | embedchain | < 0.1.57 | 0.1.57 | GHSA-r67w-f99w-mgxj |
High · 7.5
CVE-2024-23732
EUVD-2024-0056GHSA-r67w-f99w-mgxjPYSEC-2024-8
ReDoS in Embedchain
Published Jan 21, 2024 · Updated Jun 20, 2025 · Assigned by mitre