CVE-2026-112078

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

CVE-2026-112080

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

EUVD-2026-104068

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

CVE-2026-112080 LlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

CVE-2026-112080 LlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

CVE-2026-112080 LlamaChinese Llama-Chinese Adapter Config chat_gradio_no_merge.py get_class_from_dynamic_module code injection

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

CVE-2026-112080

A code injection vulnerability exists in the LlamaChinese Llama-Chinese project (up to commit 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b) within the Adapter Config component. The flaw is located in the get_class_from_dynamic_module function of the examples/chat_gradio_no_merge.py file. Specifically...

CVE-2026-112078

A code injection vulnerability exists in RVC-Project Retrieval-based-Voice-Conversion-WebUI versions up to 2.3.260718 . The flaw is located in the change_info_ function within the webui.py file. An attacker can achieve remote code execution by manipulating the ckpt_path argument. While the projec...

CVE-2026-112078 RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

CVE-2026-112078

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

CVE-2026-112078 RVC-Project Retrieval-based-Voice-Conversion-WebUI webui.py change_info_ code injection

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

EUVD-2026-104066

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

PT-2026-117224

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get class from dynamic module of the file examples/chat gradio no merge.py of the component Adapter Config. The manipulation of the argument base model name...

PT-2026-117297

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32...

CVE-2026-112078: Improper Control of Generation of Code

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

CVE-2026-112098: Improper Control of Generation of Code

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

CVE-2026-112102: Improper Control of Generation of Code

A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...

CVE-2026-110887: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32...

CVE-2026-83531: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

CVE-2026-112140: Improper Control of Generation of Code

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...