Kohyass is a GUI for Kohya's Stable Diffusion trainers. Kohyass is vulnerable to a command injection in group_images_gui.py. This vulnerability is fixed in 23.1.5.
group_images_gui.py