Applio

14 CVEs across 1 Applio products. Browse Applio vulnerabilities, severities, and proof-of-concept exploits.

Applio products with known CVEs

ProductCVEs
Applio14
Applio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-27787High7.52025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to denial of service (DoS) in restart.py. `model_name` in train.py takes user…
CVE-2025-27786Critical9.12025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. `output_tts_path` in tts.py takes arbit…
CVE-2025-27785High7.52025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_index` function. This issue may…
CVE-2025-27784High7.52025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_pth` function. This issue may le…
CVE-2025-27783Critical9.82025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in train.py. This issue may lead to writing arbitrary…
CVE-2025-27782Critical9.82025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in inference.py. This issue may lead to writing arbit…
CVE-2025-27781Critical9.82025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. `model_file` in inference.py as we…
CVE-2025-27780Critical9.82025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in model_information.py. `model_name` in model_info…
CVE-2025-27779Critical9.82025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `model_blender.py` lines 20 and 21. `model_fusio…
CVE-2025-27778Critical9.82025-03-19Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `infer.py`. The issue can lead to remote code ex…
CVE-2025-27777High7.52025-03-19Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) in `model_download.py` (line 195 in 3.2.7). Th…
CVE-2025-27776Medium5.32025-03-19Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 24…
CVE-2025-27775Medium5.32025-03-19Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 14…
CVE-2025-27774Medium5.32025-03-19Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 15…