| Package | Affected versions | Patched versions |
|---|---|---|
| gpt-sovits-webui | ≤ 20250228v3 |
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in the webui.py open_slice function. slice_opt_root and slice-inp-path takes user input, which is passed to the open_slice function, which concatenates the user input into a command and runs it on the server, leading to arbitrary command execution. At time of publication, no known patched versions are available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free