Vulnerability	Vulnerable Version
C Deserialization of Untrusted Data chattts is an A generative speech model for daily dialogue Affected versions of this package are vulnerable to Deserialization of Untrusted Data when loading the tokenizer with `torch.load`. An attacker can exploit this by supplying a malicious `tokenizer.pt` file, leading to code execution during deserialization in the Tokenizer class's `__init__` method. How to fix Deserialization of Untrusted Data? Upgrade `chattts` to version 0.2.0 or higher.	[,0.2.0)

Deserialization of Untrusted Data

chattts is an A generative speech model for daily dialogue

Affected versions of this package are vulnerable to Deserialization of Untrusted Data when loading the tokenizer with torch.load. An attacker can exploit this by supplying a malicious tokenizer.pt file, leading to code execution during deserialization in the Tokenizer class's __init__ method.

How to fix Deserialization of Untrusted Data?

Upgrade chattts to version 0.2.0 or higher.

[,0.2.0)

Go back to all versions of this package