Rvc-boss Gpt-sovits-webui — known CVE vulnerabilities

Every CVE whose affected-product data names Rvc-boss Gpt-sovits-webui, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2025-49833 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection…
• CVE-2025-49834 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection…
• CVE-2025-49835 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection…
• CVE-2025-49836 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection…
• CVE-2025-49837 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization…
• CVE-2025-49838 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization…
• CVE-2025-49839 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization…
• CVE-2025-49840 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization…
• CVE-2025-49841 — CVSS 9.8 (critical): GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization…