Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: RVC-Boss Clear all filters
TI-2025-43903 CVE-2025-71429 · GHSA-x4wc-gwq5-xx9p

OS command injection in GPT-SoVITS UVR5 output folder paths

Priority MEDIUM 53

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder paths.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02873 Published 2026-10-12 No fix listed CWE-78
TI-2026-45353 CVE-2026-63766 · GHSA-9673-c4fc-mjq2

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

Priority HIGH 81

GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands execute…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02148 Published 2026-07-20 No fix listed CWE-78