https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-39688.htmlhttps://patchthecve.com/cve/CVE-2024-39688.htmlWed, 17 Jun 2026 07:42:28 +0000MEDIUM 6.5: Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is concatenated with other folders and used to open a new file in the generate_config function, which leads to a limited file write. The issue allows for writing /config/config.json file in arbitrarhttps://patchthecve.com/cve/CVE-2024-39686.htmlhttps://patchthecve.com/cve/CVE-2024-39686.htmlWed, 17 Jun 2026 07:42:28 +0000CRITICAL 9.8: Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly in a command executed with subprocess.run(cmd, shell=True) in the bert_gen function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier.https://patchthecve.com/cve/CVE-2024-39685.htmlhttps://patchthecve.com/cve/CVE-2024-39685.htmlWed, 17 Jun 2026 07:42:28 +0000CRITICAL 9.8: Bert-VITS2 is the VITS2 Backbone with multilingual bert. User input supplied to the data_dir variable is used directly in a command executed with subprocess.run(cmd, shell=True) in the resample function, which leads to arbitrary command execution. This affects fishaudio/Bert-VITS2 2.3 and earlier.