Vendor
The Vocos library contains an arbitrary code execution vulnerability in its configuration loading process that allows attackers to execute arbitrary Python callables when loading models from untrusted repositories.