| Gradio allows users to access arbitrary filesCVE-2024-1728 · GHSA-M842-4QM8-7GPQVersion ranges need review. |
gradio |
PyPI |
Critical
|
Fix reported |
|
| Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacksCVE-2026-49119 · GHSA-J36P-7W88-G82JVersion ranges need review. |
gradio |
PyPI |
High
|
Fix reported |
|
| gradio Server Side Request Forgery vulnerabilityCVE-2024-48052 · GHSA-3GF9-WV65-GWH9Version ranges need review. |
gradio |
PyPI |
Medium
|
No fix reported |
|
| Gradio's dropdown component pre-process step does not limit the values to those in the dropdown listGHSA-26JH-R8G2-6FPR |
gradio |
PyPI |
Low
|
Fix reported |
|
| Open redirect in gradioCVE-2024-4940 · GHSA-G6C9-F4XM-9J4XVersion ranges need review. |
gradio |
PyPI |
Medium
|
No fix reported |
|
| Server-Side Request Forgery in gradioCVE-2024-4325 · GHSA-973G-55HP-3FRWVersion ranges need review. |
gradio |
PyPI |
High
|
No fix reported |
|
| Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading filesCVE-2024-1727 · GHSA-48CQ-79QQ-6F7XVersion ranges need review. |
gradio |
PyPI |
Medium
|
Fix reported |
|
| Gradio's Component Server does not properly consider` _is_server_fn` for functionsCVE-2024-34511 · GHSA-34RF-P3R3-58X2Version ranges need review. |
gradio |
PyPI |
Medium
|
Fix reported |
|
| gradio vulnerable to Path TraversalCVE-2024-1561 · GHSA-G9CJ-CFPP-4G2XVersion ranges need review. |
gradio |
PyPI |
High
|
Fix reported |
|
| gradio Server-Side Request Forgery vulnerabilityCVE-2024-2206 · GHSA-R364-M2J9-MF4HVersion ranges need review. |
gradio |
PyPI |
High
|
Fix reported |
|
| Gradio apps vulnerable to timing attacks to guess passwordCVE-2024-1729 · GHSA-HMX6-R76C-85G9Version ranges need review. |
gradio |
PyPI |
Medium
|
Fix reported |
|
| Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerabilityCVE-2023-6572 · GHSA-GQVF-3HGP-5HXVVersion ranges need review. |
gradio |
PyPI |
Critical
|
Fix reported |
|
| Gradio vulnerable to arbitrary file read and proxying of arbitrary URLsCVE-2023-34239 · GHSA-3QQG-PGQQ-3695Version ranges need review. |
gradio |
PyPI |
Medium
|
Fix reported |
|
| Gradio makes the `/file` secure against file traversal and server-side request forgery attacksCVE-2023-51449 · GHSA-6QM2-WPXQ-7QH2Version ranges need review. |
gradio |
PyPI |
High
|
Fix reported |
|
| Update share links to use FRP instead of SSH tunnelingCVE-2023-25823 · GHSA-3X5J-9VWR-8RR5Version ranges need review. |
gradio |
PyPI |
Medium
|
Fix reported |
|
| gradio Server-Side Request Forgery vulnerabilityCVE-2024-1183 · GHSA-QH6X-J82H-VPF9Version ranges need review. |
gradio |
PyPI |
Medium
|
Fix reported |
|
| Gradio: Audio cache key ignores metadata when saving numpy audio outputsCVE-2026-10783 · GHSA-6655-8PH2-63J3Version ranges need review. |
gradio |
PyPI |
Low
|
Fix reported |
|
| Gradio contains a cookie injection vulnerabilityCVE-2026-48545 · GHSA-7HP7-4P35-3CX2Version ranges need review. |
gradio |
PyPI |
High
|
Fix reported |
|
| PYSEC-2024-321CVE-2024-4253 · PYSEC-2024-321 |
gradio |
PyPI |
Critical
|
Fix reported |
|
| Files on the host computer can be accessed from the Gradio interfaceCVE-2021-43831 · GHSA-RHQ2-3VR9-6MCRVersion ranges need review. |
gradio |
PyPI |
Critical
|
Fix reported |
|
