CVE-2026-31217

The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...

CVE-2026-31232

The CosyVoice project (up to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e) is vulnerable to an insecure deserialization (CWE-502) flaw during its model loading process. The application uses torch.load() to process .pt model files from a user-specified directory (via the --model_dir argument) w...