{"kind": "product", "path": "vulns/pypi/gradio", "name": "gradio", "product": "gradio", "ecosystem": "PyPI", "items": [{"id": "CVE-2024-34511", "noindex": false, "published": "2026-07-07T11:45:41.724874Z", "modified": "2026-07-07T17:47:37.762737415Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "severity": "medium", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-34511", "title": "Gradio's Component Server does not properly consider` _is_server_fn` for functions", "description": "Component Server in Gradio before 4.13 does not properly consider` _is_server_fn` for functions.", "references": ["https://nvd.nist.gov/vuln/detail/CVE-2024-34511", "https://github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2", "https://github.com/gradio-app/gradio"], "fixes": ["4.13.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-49119", "noindex": false, "published": "2026-07-01T18:30:38.749Z", "modified": "2026-07-14T21:33:12.523Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0069, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-49119", "title": "Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()", "description": "Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory.", "references": ["https://github.com/gradio-app/gradio/releases/tag/gradio%406.16.0", "https://github.com/gradio-app/gradio/pull/13437", "https://github.com/gradio-app/gradio/commit/97d541f3d5fd05b2587a69ecc94b68fe5d2d7004"], "fixes": ["6.16.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-10783", "noindex": false, "published": "2026-06-03T23:30:12.545Z", "modified": "2026-06-04T14:19:42.477Z", "cvss": 2, "cvss_vector": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "severity": "low", "epss": 0.00106, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-10783", "title": "gradio-app gradio Audio Cache Key save_audio_to_cache weak hash", "description": "A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.", "references": ["https://vuldb.com/vuln/368140", "https://vuldb.com/vuln/368140/cti", "https://vuldb.com/cve/CVE-2026-10783"], "fixes": ["6.15.1"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}, {"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-48545", "noindex": false, "published": "2026-05-27T14:59:33.071Z", "modified": "2026-10-08T15:22:58.029Z", "cvss": 7.6, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0035, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-48545", "title": "Gradio < 6.15.0 Cookie Injection via Shared Proxy Client", "description": "Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment.", "references": ["https://github.com/gradio-app/gradio/releases/tag/gradio%406.15.0", "https://github.com/gradio-app/gradio/issues/13369", "https://github.com/gradio-app/gradio/pull/13384"], "fixes": ["6.15.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-28416", "noindex": false, "published": "2026-02-27T21:47:04.975Z", "modified": "2026-03-02T21:59:40.942Z", "cvss": 8.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "severity": "high", "epss": 0.07262, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-28416", "title": "Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing", "description": "Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses `gr.load()` to load an attacker-controlled Space, the malicious `proxy_url` from the config is trusted and added to the allowlist, enabling the attacker to access internal services, cloud metadata endpoints, and private networks through the victim's infrastructure. Version 6.6.0 fixes the issue.", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-jmh7-g254-2cq9", "https://nvd.nist.gov/vuln/detail/CVE-2026-28416"], "fixes": ["6.6.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-28415", "noindex": false, "published": "2026-02-27T21:44:51.956Z", "modified": "2026-03-02T21:55:38.664Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "severity": "medium", "epss": 0.00288, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-28415", "title": "Gradio has Open Redirect in OAuth Flow", "description": "Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). Starting in version 6.6.0, the _target_url parameter is sanitized to only use the path, query, and fragment, stripping any scheme or host.", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-pfjf-5gxr-995x", "https://nvd.nist.gov/vuln/detail/CVE-2026-28415"], "fixes": ["6.6.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-28414", "noindex": false, "published": "2026-02-27T21:43:28.453Z", "modified": "2026-03-02T22:02:17.902Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.03059, "kev": false, "exploits": ["nuclei"], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-28414", "title": "Gradio has Absolute Path Traversal on Windows with Python 3.13+", "description": "Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. Python 3.13+ changed the definition of `os.path.isabs` so that root-relative paths like `/windows/win.ini` on Windows are no longer considered absolute paths, resulting in a vulnerability in Gradio's logic for joining paths safely. This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentic", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-39mp-8hj3-5c49", "https://nvd.nist.gov/vuln/detail/CVE-2026-28414"], "fixes": ["6.7.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2026-27167", "noindex": false, "published": "2026-02-27T21:40:57.917Z", "modified": "2026-03-02T22:02:47.868Z", "cvss": 0, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N", "severity": "low", "epss": 0.0051, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2026-27167", "title": "Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret", "description": "Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version 6.6.0, Gradio applications running outside of Hugging Face Spaces automatically enable \"mocked\" OAuth routes when OAuth components (e.g. `gr.LoginButton`) are used. When a user visits `/login/huggingface`, the server retrieves its own Hugging Face access token via `huggingface_hub.get_token()` and stores it in the visitor's session cookie. If the application is network-accessible, any remote attacker can trigger this flow to steal the server owner's HF token. The session cookie is signed with a hardcoded secret derived from ", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-h3h8-3v2v-rg7m", "https://nvd.nist.gov/vuln/detail/CVE-2026-27167"], "fixes": ["6.6.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-48889", "noindex": false, "published": "2025-05-30T06:12:32.703Z", "modified": "2025-05-30T12:25:35.195Z", "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "severity": "medium", "epss": 0.0066, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-48889", "title": "Gradio Allows Unauthorized File Copy via Path Manipulation", "description": "Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Prior to version 5.31.0, an arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers to copy any readable file from the server's filesystem. While attackers can't read these copied files, they can cause DoS by copying large files (like /dev/urandom) to fill disk space. This issue has been patched in version 5.31.0.", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-8jw3-6x8j-v96g", "https://nvd.nist.gov/vuln/detail/CVE-2025-48889"], "fixes": ["5.31.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}, {"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-5320", "noindex": false, "published": "2025-05-29T13:31:04.612Z", "modified": "2025-06-01T04:39:35.844Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00268, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-5320", "title": "gradio-app gradio CORS is_valid_origin privilege escalation", "description": "A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is_valid_origin of the component CORS Handler. The manipulation of the argument localhost_aliases leads to erweiterte Rechte. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", "references": ["https://vuldb.com/?id.310491", "https://vuldb.com/?ctiid.310491", "https://vuldb.com/?submit.580250"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-8021", "noindex": false, "published": "2025-03-20T10:11:13.192Z", "modified": "2025-03-20T13:11:17.795Z", "cvss": 5.4, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "severity": "medium", "epss": 0.00759, "kev": false, "exploits": ["nuclei"], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-8021", "title": "Open Redirect in gradio-app/gradio", "description": "An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.", "references": ["https://huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888", "https://nvd.nist.gov/vuln/detail/CVE-2024-8021"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-10648", "noindex": false, "published": "2025-03-20T10:11:11.154Z", "modified": "2025-03-20T14:21:33.649Z", "cvss": 8.2, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "severity": "high", "epss": 0.00731, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-10648", "title": "Path Traversal in gradio-app/gradio", "description": "A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.", "references": ["https://huntr.com/bounties/667d664d-8189-458c-8ed7-483fe8f33c76", "https://nvd.nist.gov/vuln/detail/CVE-2024-10648"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-12217", "noindex": false, "published": "2025-03-20T10:11:08.996Z", "modified": "2025-03-20T15:14:58.726Z", "cvss": 5.3, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "severity": "medium", "epss": 0.00698, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-12217", "title": "Path Traversal in gradio-app/gradio", "description": "A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like 'C:/tmp/secret.txt', it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as 'C:/tmp/secret.txt::$DATA'. This flaw can lead to unauthorized reading of blocked file paths.", "references": ["https://huntr.com/bounties/0439bf3d-cb38-43a5-8314-0fadf85cc5a0", "https://nvd.nist.gov/vuln/detail/CVE-2024-12217"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-8966", "noindex": false, "published": "2025-03-20T10:11:03.188Z", "modified": "2025-10-15T12:49:58.234Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00806, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-8966", "title": "Denial of Service in gradio-app/gradio", "description": "A vulnerability in the file upload process of gradio-app/gradio version @gradio/video@0.10.2 allows for a Denial of Service (DoS) attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue warnings. This can render Gradio inaccessible for extended periods, disrupting services and causing significant downtime.", "references": ["https://huntr.com/bounties/7b5932bb-58d1-4e71-b85c-43dc40522ff2", "https://github.com/gradio-app/gradio/commit/f1718c47137f9c60240da7afe5e3290aa0f1cb47", "https://nvd.nist.gov/vuln/detail/CVE-2024-8966"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-10569", "noindex": false, "published": "2025-03-20T10:10:57.236Z", "modified": "2025-03-20T17:53:15.263Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00661, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-10569", "title": "Zip Bomb Vulnerability in gradio-app/gradio", "description": "A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server crash and causing a denial of service.", "references": ["https://huntr.com/bounties/7192bcbb-08a3-4d22-a321-9c6d19dbfc74", "https://nvd.nist.gov/vuln/detail/CVE-2024-10569"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-10624", "noindex": false, "published": "2025-03-20T10:10:43.329Z", "modified": "2025-10-15T12:50:09.419Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.01099, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-10624", "title": "Regular Expression Denial of Service (ReDoS) in gradio-app/gradio", "description": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression `^(?:\\s*now\\s*(?:-\\s*(\\d+)\\s*([dmhs]))?)?\\s*$` to process user input. In Python's default regex engine, this regular expression can take polynomial time to match certain crafted inputs. An attacker can exploit this by sending a crafted HTTP request, causing the gradio process to consume 100% CPU and potentially leading to a Denial of Service (DoS) condition on the server.", "references": ["https://huntr.com/bounties/e8d0b248-8feb-4c23-9ef9-be4d1e868374", "https://nvd.nist.gov/vuln/detail/CVE-2024-10624"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-23042", "noindex": false, "published": "2025-01-14T18:49:16.329Z", "modified": "2025-02-12T20:31:19.766Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00997, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-23042", "title": "Gradio Blocked Path ACL Bypass Vulnerability", "description": "Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) for file paths can be bypassed by altering the letter case of a blocked file or directory path. This vulnerability arises due to the lack of case normalization in the file path validation logic. On case-insensitive file systems, such as those used by Windows and macOS, this flaw enables attackers to circumvent security restrictions and access sensitive files that should be protected. This issue can lead to unauthorized data access, exposing sensit", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-j2jg-fq62-7c3h", "https://nvd.nist.gov/vuln/detail/CVE-2025-23042"], "fixes": ["5.11.0", "5.6.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}, {"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-51751", "noindex": false, "published": "2024-11-06T19:11:38.731Z", "modified": "2024-11-06T19:58:13.376Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00681, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-51751", "title": "Arbitrary file read with File and UploadButton components in Gradio", "description": "Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as a part of Gradio application to preview file content, an attacker with access to the application might abuse these components to read arbitrary files from the application server. This issue has been addressed in release version 5.5.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-rhm9-gp5p-5248", "https://nvd.nist.gov/vuln/detail/CVE-2024-51751"], "fixes": ["5.5.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-48052", "noindex": false, "published": "2024-11-04T00:00:00.000Z", "modified": "2024-11-06T19:21:09.673Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.0047, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-48052", "title": "CVE-2024-48052", "description": "In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within the save_url_to_cache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resources and sensitive information.", "references": ["https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4", "https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12", "https://nvd.nist.gov/vuln/detail/CVE-2024-48052"], "fixes": [], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-47867", "noindex": false, "published": "2024-10-10T22:19:11.631Z", "modified": "2024-10-11T15:06:32.529Z", "cvss": 2.1, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "severity": "low", "epss": 0.00213, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-47867", "title": "Lack of integrity check on the downloaded FRP client in Gradio", "description": "Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloaded FRP client, which could potentially allow attackers to introduce malicious code. If an attacker gains access to the remote URL from which the FRP client is downloaded, they could modify the binary without detection, as the Gradio server does not verify the file's checksum or signature.  Any users utilizing the Gradio server's sharing mechanism that downloads the FRP client could be affected by this vulnerability, especially those relying on the executable binary for secure data tunneling. There is no di", "references": ["https://github.com/gradio-app/gradio/security/advisories/GHSA-8c87-gvhj-xm8m", "https://nvd.nist.gov/vuln/detail/CVE-2024-47867"], "fixes": ["5.0.0"], "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}]}], "total": 52, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 3, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "gradio", "path": "vulns/pypi/gradio", "ecosystem": "PyPI"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": ["6.15.2", "6.15.1", "6.15.0", "6.14.0", "6.13.0", "6.12.0", "6.11.0", "6.10.0", "6.9.0", "6.8.0", "6.7.0", "6.6.0"], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-10-08T15:22:58.029Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}