Vulnerabilities (CVE)

Filtered by vendor Bmaltais Subscribe
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-32023 1 Bmaltais 1 Kohya Ss 2025-09-08 N/A 6.5 MEDIUM
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `find_and_replace` function. This vulnerability is fixed in 23.1.5.
CVE-2024-32024 1 Bmaltais 1 Kohya Ss 2025-09-08 N/A 6.5 MEDIUM
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `add_pre_postfix` function. This vulnerability is fixed in 23.1.5.
CVE-2024-32025 1 Bmaltais 1 Kohya Ss 2025-09-08 N/A 9.1 CRITICAL
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_gui.py`. This vulnerability is fixed in 23.1.5.
CVE-2024-32026 1 Bmaltais 1 Kohya Ss 2025-09-08 N/A 9.1 CRITICAL
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `git_caption_gui.py`. This vulnerability is fixed in 23.1.5.
CVE-2024-32027 1 Bmaltais 1 Kohya Ss 2025-09-08 N/A 9.1 CRITICAL
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss v22.6.1 is vulnerable to command injection in `finetune_gui.py` This vulnerability is fixed in 23.1.5.