| Package | Affected versions | Patched versions |
|---|---|---|
| gpt-sovits-webui | ≤ 20250228v3 |
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py change_label function. path_list takes user input, which is passed to the change_label function, which concatenates the user input into a command and runs it on the server, leading to arbitrary command execution. At time of publication, no known patched versions are available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free