Advisories · Technology

pavelzbornik whisperX-FastAPI.

Every CVE that names pavelzbornik whisperX-FastAPI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-34981 CVE record

CVSS 5.8 Medium

whisperX REST API: SSRF in download_from_url() — URL validation happens after HTTP request, extension bypass via .mp3
- pavelzbornik whisperX-FastAPI
- Server-side request forgery (SSRF)
Not analysed yet 6 Apr 2026