Xorbits Inference Path Traversal Vulnerability

Xorbits Inference versions 4.0.1 and earlier have a path traversal vulnerability. This vulnerability arises due to the backslash sequence in the modelname parameter on Windows, which allows for path traversal. Unauthenticated attackers can register persistent custom models via POST...

EUVD-2025-10924

Malicious code in bioql PyPI...

CVE-2025-3622

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622 Xorbits Inference model.py load deserialization

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622

Xorbits Inference up to version 1.4.1 contains a deserialization flaw in the load function of xinference/thirdparty/cosyvoice/cli/model.py. The issue allows manipulation of serialized data to trigger code execution or other unintended behavior. CVSS metrics in the connected data indicate a MEDIUM...

CVE-2025-3622 Xorbits Inference model.py load deserialization

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622 Xorbits Inference model.py load deserialization

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

CVE-2025-3622

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

Xorbits Inference security vulnerability

Xorbits Inference is an open source Xorbits tool that can be used with a variety of LLMs. A security vulnerability exists in Xorbits Inference 1.4.1 and earlier versions, which stems from improper handling of the load function in the xinference/thirdparty/cosyvoice/cli/model.py file, which could...

CVE-2025-3622: Deserialization of Untrusted Data

A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...

PT-2025-16292

Name of the Vulnerable Software and Affected Versions Xorbits Inference versions up to 1.4.1 Description A critical vulnerability has been found in Xorbits Inference, affecting the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...