Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input.

Affected Packages

PyPI Gradio

Related CVEs

CVE-2024-39236

Key Information

GHSA ID

GHSA-9v2f-6vcg-3hgv

Published

July 1, 2024 9:31 PM

Last Modified

September 3, 2024 7:59 PM

CVSS Score

9.0 /10

Primary Ecosystem

PyPI

Primary Package

Gradio

GitHub Reviewed

✓ Yes

Dataset

Last updated: September 16, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.