GHSA-WQ7Q-5V6J-XFV6 Command Injection in picotts

This affects all versions up to and including version 0.1.1 of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23378

This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23378

This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

CVE-2021-23378

This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the childprocess exec function without input sanitization...

PT-2021-15474

Name of the Vulnerable Software and Affected Versions picotts versions prior to 0.1.1 Description The issue arises when attacker-controlled user input is given to the say function, allowing an attacker to execute arbitrary commands due to the use of the child process exec function without input...

Arbitrary Command Injection

Overview picotts is a PicoTTS wrapper. PicoTTS is being used by Android and it's extremely lightweight and fast yet produces very natural voices. Affected versions of this package are vulnerable to Arbitrary Command Injection. If attacker-controlled user input is given to the say function, it is...