Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Yusuke Justin Nakajima

#37816of 56,330
7.5Total CVSS
Vulnerabilities · 1
PT-2024-20042
7.5
2024-01-21
Unknown · Embedchain · CVE-2024-23732
**Name of the Vulnerable Software and Affected Versions** Embedchain versions prior to 0.1.57 **Description** The issue allows a ReDoS (regular expression denial of service) via a long string to json.py. This occurs in the JSON loader of Embedchain. **Recommendations** For versions prior to 0.1.57, update to version 0.1.57 or later to resolve the issue. As a temporary workaround, consider restricting input to the JSON loader to prevent long strings from being processed.