CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-23731
Critical (9.8) in embedchain embedchain. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in embedchain 0.1.57.
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-88
- Published
- Modified
- Record from
- the NVD, synced
Affected
- embedchain:embedchain
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-rhhj-5436-95vf | PyPI | embedchain | <0.1.57 | 0.1.57 |
| PYSEC-2024-7 | PyPI | embedchain | <0.1.57 | 0.1.57 |