Skip to content
Submit incident
Organization/organizations/github-security-lab

GitHub Security Lab

10
Records
2024 to 2025
Years covered
1
Category

Incidents by year

2024
5
2025
5

Incident records10

Apr 2025Command injection vulnerabilities in Retrieval-based-Voice-Conversion-WebUIConfirmedSecurity and cyberattacksgithub.comsecuritylab.github.comApr 2025Command injection in Retrieval-based-Voice-Conversion-WebUI extract_f0_featureConfirmedSecurity and cyberattackssecuritylab.github.comApr 2025Command injection in Retrieval-based-Voice-Conversion-WebUIConfirmedSecurity and cyberattackssecuritylab.github.comcve.orgMar 2025Applio allows arbitrary file write in inference.pyConfirmedSecurity and cyberattacksgithub.comsecuritylab.github.comFeb 2025Applio allows unsafe deserialization in inference.pyConfirmedSecurity and cyberattacksgithub.comsecuritylab.github.comDec 2024Applio allows SSRF and arbitrary file write via model_download.pyConfirmedSecurity and cyberattacksgithub.comsecuritylab.github.comcve.orgDec 2024Applio unsafe deserialization vulnerability in model_information.pyConfirmedSecurity and cyberattacksgithub.comsecuritylab.github.comDec 2024DoS vulnerability in Applio restart.py via arbitrary process terminationConfirmedSecurity and cyberattacksgithub.comsecuritylab.github.comcve.orgNov 2024ReDoS vulnerability in Giskard text perturbation detectorConfirmedSecurity and cyberattacksgithub.comcve.orgJul 2024rembg CORS misconfiguration (CVE-2025-25302)ConfirmedSecurity and cyberattackssecuritylab.github.comcve.org