# R: Statement on CVE-2024-27322

**URL:** <https://forum.devtalk.com/t/r-statement-on-cve-2024-27322/154769>\
**Category:** Backend Official News\
**Tags:** newsbot, r-lang, official-news\
**Created:** [11 May 2024 06:03 UTC](https://forum.devtalk.com/t/r-statement-on-cve-2024-27322/154769 "2024-05-11T06:03:43Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [11 May 2024 06:03 UTC](https://forum.devtalk.com/t/r-statement-on-cve-2024-27322/154769/1 "2024-05-11T06:03:43Z")

</div>

A new [R](https://devtalk.com/r) blog post/announcement has been posted!

> [@](#):
>
> This is a brief statement on behalf or the R Core Team on the serialization bug recently reported by the cybersecurity form HiddenLayer. The bug has been reported as a vulnerability with id CVE-2024-27322.  
> R is a full-featured language that includes functions to interface with both the host operating system and the Internet. As with any such language, there are many ways to write code with malicious intent. Users should ensure that they only use R code and data from trusted sources and that the privileges of the account running R are appropriately limited.

Get the full details here: [https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/](https://blog.r-project.org/2024/05/10/statement-on-cve-2024-27322/)