PyPI/inspiremusic CVE-2025-5148: medium 5.3, EPSS 0.21%
FunAudioLLM InspireMusic deserialization vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.0.1.dev0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pgp9-g5q8-j3wp
- https://nvd.nist.gov/vuln/detail/CVE-2025-5148
- https://github.com/FunAudioLLM/InspireMusic/issues/53
- https://github.com/FunAudioLLM/InspireMusic/issues/53#issuecomment-2866688220
- https://github.com/FunAudioLLM/InspireMusic/commit/784cbf8dde2cf1456ff808aeba23177e1810e7a9
- https://github.com/FunAudioLLM/InspireMusic
- https://vuldb.com/?ctiid.310236
- https://vuldb.com/?id.310236
- https://vuldb.com/?submit.573800
CVE-2025-5148 · published · modified · JSON