Loading...
This critical-severity CVE scores 9.8 under NVD CVSS v3. EPSS exploit probability: 4.4%, top 11% of all CVEs by exploit prediction. GitHub Security Advisory data not yet ingested — confidence will rise once GHSA publishes (typical lag: hours to days for open-source ecosystem CVEs; never for infrastructure-only CVEs).
Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in infer.py. The issue can lead to remote code execution. As of time of publication, a fix is available on the main branch of the Applio repository but not attached to a numbered release.
March 19, 2025
August 1, 2025
Patch available: IAHispano/Applio 3.2.9 (contains commit eb21d9dd349a)
https://github.com/IAHispano/Applio/commit/eb21d9dd349a6ae1a28c440b30d306eafba65097Patch available: IAHispano/Applio 3.2.9 (contains commit 16019befdcbb)
https://github.com/IAHispano/Applio/commit/16019befdcbbff0b264a5e30785feef4b70df8d9MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Every time one of our enrichment pipelines (NVD, MITRE cvelistV5, EPSS, CISA KEV, GHSA, OSV, vendor advisories) ran against this CVE. Most recent first.
See which npm, PyPI, Go, and Maven packages are affected by CVE-2025-27778
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.
CWE-502