Skip to content
OpenAdvisories

Vendor

RVC-Boss

11 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-63766 Public exploit

    GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

    GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uvr5 functions interpolate unsanitized Gradio textbox values directly into shell commands executed with shell=True. Attackers can inject…