Approved changes feed: RSS · Atom
cpe:2.3:a:bmaltais:kohya_ss:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Bmaltais (19ba9d17-7f25-51cc-ada9-b6ec785d23d5) |
|---|---|
| Product | Kohya Ss (25c933d5-e7e1-5e29-a559-12c7218172d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bmaltais/kohya_ss |
purl2cpe | 2026-06-01 10:15:37.835899 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-32027 |
vulnerable | 2026-06-08 06:35:32.641185 |
Kohya_ss is vulnerable to a command injection in `finetune_gui.py` (`GHSL-2024-022`)
CRITICAL (9.1)
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss v22.6.1 is vulnerable to command injection in `finetune_gui.py` This vulnerability is fixed in 23.1.5.
Published: 2024-04-16T14:46:24.185Z
Updated: 2024-08-02T01:59:50.840Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32026 |
vulnerable | 2026-06-08 06:35:32.639862 |
Kohya_ss is vulnerable to a command injection in `git_caption_gui.py` (`GHSL-2024-020`)
CRITICAL (9.1)
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `git_caption_gui.py`. This vulnerability is fixed in 23.1.5.
Published: 2024-04-16T14:45:28.180Z
Updated: 2024-08-02T01:59:50.685Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32025 |
vulnerable | 2026-06-08 06:35:32.638043 |
Kohya_ss is vulnerable to a command injection in `group_images_gui.py` (`GHSL-2024-021`)
CRITICAL (9.1)
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_gui.py`. This vulnerability is fixed in 23.1.5.
Published: 2024-04-16T14:44:21.648Z
Updated: 2025-08-27T21:12:59.522Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32024 |
vulnerable | 2026-06-08 06:35:32.637675 |
Kohya_ss vulenrable to path injection in `common_gui.py` `add_pre_postfix` function (`GHSL-2024-023`)
MEDIUM (6.5)
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `add_pre_postfix` function. This vulnerability is fixed in 23.1.5.
Published: 2024-04-16T14:42:20.969Z
Updated: 2024-08-02T01:59:50.792Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32023 |
vulnerable | 2026-06-08 06:35:32.637270 |
Kohya_ss vulnerable to path injection in `common_gui.py` `find_and_replace` function (`GHSL-2024-024`)
MEDIUM (6.5)
Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `find_and_replace` function. This vulnerability is fixed in 23.1.5.
Published: 2024-04-16T14:39:21.366Z
Updated: 2024-08-02T01:59:50.833Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32022 |
vulnerable | 2026-06-08 06:35:32.636750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.