PyPI/embedchain CVE-2024-23732: unknown, EPSS 0.78%

The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.

Action: Upgrade embedchain to 0.1.57 or later.

pip install embedchain==0.1.57

Affected

Fixed versions

Sources

• osv: PYSEC-2024-8
• https://github.com/embedchain/embedchain/pull/1122
• https://github.com/embedchain/embedchain/compare/0.1.56...0.1.57
• https://github.com/advisories/GHSA-r67w-f99w-mgxj

CVE-2024-23732 · published 2024-01-21T17:15:00Z · modified 2026-06-10T17:01:15.861940148Z · JSON