https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-32027.htmlhttps://patchthecve.com/cve/CVE-2024-32027.htmlWed, 17 Jun 2026 07:29:08 +0000CRITICAL 9.1: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss v22.6.1 is vulnerable to command injection in `finetune_gui.py` This vulnerability is fixed in 23.1.5.https://patchthecve.com/cve/CVE-2024-32026.htmlhttps://patchthecve.com/cve/CVE-2024-32026.htmlWed, 17 Jun 2026 07:29:08 +0000CRITICAL 9.1: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `git_caption_gui.py`. This vulnerability is fixed in 23.1.5.https://patchthecve.com/cve/CVE-2024-32025.htmlhttps://patchthecve.com/cve/CVE-2024-32025.htmlWed, 17 Jun 2026 07:29:08 +0000CRITICAL 9.1: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a command injection in `group_images_gui.py`. This vulnerability is fixed in 23.1.5.https://patchthecve.com/cve/CVE-2024-32024.htmlhttps://patchthecve.com/cve/CVE-2024-32024.htmlWed, 17 Jun 2026 07:29:08 +0000MEDIUM 6.5: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `add_pre_postfix` function. This vulnerability is fixed in 23.1.5.https://patchthecve.com/cve/CVE-2024-32023.htmlhttps://patchthecve.com/cve/CVE-2024-32023.htmlWed, 17 Jun 2026 07:29:08 +0000MEDIUM 6.5: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to a path injection in the `common_gui.py` `find_and_replace` function. This vulnerability is fixed in 23.1.5.https://patchthecve.com/cve/CVE-2024-32022.htmlhttps://patchthecve.com/cve/CVE-2024-32022.htmlWed, 17 Jun 2026 07:29:08 +0000CRITICAL 9.1: Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Kohya_ss is vulnerable to command injection in basic_caption_gui.py. This vulnerability is fixed in 23.1.5.