CVE-2025-3163

creationtimestamp| type| source ---|---|--- 2025-04-03 19:06:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llwlvmfuql2i 2025-04-03 19:24:59+00:00| seen| https://t.me/cvedetector/21991 2025-04-21 12:01:37+00:00| published-proof-of-concept|...

soprano-tts (=0.0.2) potentially affected by CVE-2025-3163 via lmdeploy (=0.13.0)

lmdeploy PYPI version =0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on lmdeploy and may be impacted: - soprano-tts =0.0.2 Source cves: CVE-2025-3163 Source advisory: SNYK:PYTHON-LMDEPLOY-10343889...

CVE-2025-3163

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...