easyVoice vulnerabilities

CVEs whose affected-version data names the easyVoice package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121936Medium· 6.5PoC

4d ago

easyVoice before 0.0.23 SSRF via openaiBaseUrl in TTS API

easyVoice before 0.0.23 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send POST requests by supplying openaiBaseUrl with useLLM enabled. Attackers can target loopback and in…

▾ Twilightcosin2077 · easyVoiceEPSS 0.35%via CVEORG