Approved changes feed: RSS · Atom
cpe:2.3:a:cosin2077:easyvoice:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cosin2077 (d6d6203e-75dd-597e-a5c8-521726de5c2e) |
|---|---|
| Product | Easyvoice (3f64495f-ada3-5389-bc7e-01eee00d3db2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-121936 |
vulnerable | 2026-11-04 14:25:23.949503 |
easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API
MEDIUM (6.5)
easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and internal services through /api/v1/tts endpoints, using reflected error messages in the x-generate-tts-warning header to probe internal hosts and ports.
Published: 2026-11-04T12:31:16.408Z
Updated: 2026-11-04T18:56:27.814Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.