CVE-2024-32024
Kohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function (`GHSL-2024-023`)
Summary
Kohya_ss vulenrable to path injection in common_gui.py add_pre_postfix function (GHSL-2024-023)
Original description
The description as published by the source.
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the common_gui.py add_pre_postfix function. This vulnerability is fixed in 23.1.5.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com
- patch github.com