Skip to content
OpenAdvisories

Vendor

gemelo-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.8

    Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration

    Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in vocos/pretrained.py takes the class_path value from the configuration, splits it into a module and an attribute, imports the module wit…