TI-2024-26609 CVE-2024-39685
fishaudio/Bert-VITS2 Command Injection in webui_preprocess.py resample function
Priority HIGH 82
Bert-VITS2 is the VITS2 Backbone with multilingual bert.
Fish.audio
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Fish.audio records in CISA KEVNo Fish.audio vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Bert-vits2 · all components
TI-2024-26612 CVE-2024-39688
fishaudio/Bert-VITS2 Limited File Write in webui_preprocess.py generate_config function
Priority LOW 35
Bert-VITS2 is the VITS2 Backbone with multilingual bert.