Vendor
gemelo-ai
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.8
Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration
Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiate_class in vocos/pretrained.py takes the class_path value from the configuration, splits it into a module and an attribute, imports the module wit…