Vulnerabilities

TI-2024-21117 CVE-2024-32022

Kohya_ss is vulnerable to a command injection in basic_caption_gui.py (GHSL-2024-019)

HIGH 82

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03114 Published 2024-04-16 Fixed in 23.1.5 CWE-77

TI-2024-21122 CVE-2024-32027

HIGH 82

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03029 Published 2024-04-16 Fixed in 23.1.5 CWE-77

TI-2024-21121 CVE-2024-32026

MEDIUM 54

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03029 Published 2024-04-16 Fixed in 23.1.5 CWE-77

TI-2024-21120 CVE-2024-32025

MEDIUM 46

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02494 Published 2024-04-16 Fixed in 23.1.5 CWE-77

TI-2024-21119 CVE-2024-32024

MEDIUM 62

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00666 Published 2024-04-16 Fixed in 23.1.5 CWE-22

TI-2024-21118 CVE-2024-32023

LOW 36

Kohya_ss is a GUI for Kohya's Stable Diffusion trainers.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00652 Published 2024-04-16 Fixed in 23.1.5 CWE-22