445 matches found
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2023-51449 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2023-51449 Source advisory: OSV:PYSEC-2023-249...
cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2023-51449 via gradio (3.43.2)
gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2023-51449 Source advisory: OSV:PYSEC-2023-249...
cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2023-51449 via gradio (3.43.2)
gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2023-51449 Source advisory:...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2023-51449 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2023-51449 Source advisory:...
Pedroetb TTS-API OS Command Injection
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
GHSA-JX6Q-FQ9H-6G7Q Pedroetb TTS-API OS Command Injection
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
CVE-2019-25158
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
CVE-2019-25158
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
Command injection
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
CVE-2019-25158
CVE-2019-25158 affects pedroetb tts-api up to version 2.1.4. The vulnerability is in the onSpeechDone function of app.js, enabling OS command injection. A fix is available in version 2.2.0, with the patch identified as 29d9c25415911ea2f8b6de247cb5c4607d13d434. Upgrading to 2.2.0 is recommended to...
CVE-2019-25158 pedroetb tts-api app.js onSpeechDone os command injection
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
CVE-2019-25158
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
PT-2023-11383 · Pedroetb · Tts-Api
Name of the Vulnerable Software and Affected Versions: pedroetb tts-api versions up to 2.1.4 Description: A critical vulnerability has been found in the pedroetb tts-api, affecting the onSpeechDone function of the file app.js. This issue leads to os command injection. Recommendations: For pedroet...
CVE-2019-25158: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in pedroetb tts-api up to 2.1.4 and classified as critical. This vulnerability affects the function onSpeechDone of the file app.js. The manipulation leads to os command injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2023-6572 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2023-6572 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2023-6572 Source advisory: OSV:PYSEC-2023-255...
cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2023-6572 via gradio (3.43.2)
gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2023-6572 Source advisory: OSV:PYSEC-2023-255...
CVE-2023-5300
A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2023-27587
ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google...
Cross site request forgery (csrf)
ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google...