PT-2025-16292

Name of the Vulnerable Software and Affected Versions Xorbits Inference versions up to 1.4.1 Description A critical vulnerability has been found in Xorbits Inference, affecting the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-8966 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-8966 Source advisory: OSV:GHSA-5CPQ-9538-JM2J...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-12217 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-12217 Source advisory: OSV:GHSA-PRPG-P95C-32FV...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2025-23042 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2025-23042 Source advisory: OSV:PYSEC-2025-118...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2025-23042 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2025-23042 Source advisory: OSV:GHSA-J2JG-FQ62-7C3H...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47872 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47872 Source advisory: OSV:PYSEC-2024-220...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47870 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47871 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47871 Source advisory: OSV:PYSEC-2024-219...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47868 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47868 Source advisory: OSV:PYSEC-2024-217...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47867 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47867 Source advisory: OSV:PYSEC-2024-216...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47167 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47167 Source advisory: OSV:PYSEC-2024-215...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47165 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47164 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47164 Source advisory: OSV:PYSEC-2024-213...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by unknown CVE via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: unknown CVE Source advisory: OSV:GHSA-26JH-R8G2-6FPR...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47872 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47872 Source advisory: OSV:GHSA-GVV6-33J7-884G...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47871 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47871 Source advisory: OSV:GHSA-279J-X4GX-HFRH...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47870 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47870 Source advisory: OSV:GHSA-XH2X-3MRM-FWQM...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47868 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47868 Source advisory: OSV:GHSA-4Q3C-CJ7G-JCWF...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2024-47867 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2024-47867 Source advisory: OSV:GHSA-8C87-GVHJ-XM8M...