漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
GHSL-2025-017_Retrieval-based-Voice-Conversion-WebUI
Vulnerability Description
Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_path2 variable takes user input (e.g. a path to a model) and passes it to the extract_small_model function in process_ckpt.py, which uses it to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.
CVSS Information
N/A
Vulnerability Type
可信数据的反序列化
Vulnerability Title
Retrieval-based-Voice-Conversion-WebUI 代码问题漏洞
Vulnerability Description
Retrieval-based-Voice-Conversion-WebUI是RVC-Project开源的一个声音训练模型工具。 Retrieval-based-Voice-Conversion-WebUI 2.2.231006及之前版本存在代码问题漏洞，该漏洞源于ckpt_path2变量处理不当，可能导致不安全的反序列化和远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A