gradio_project

1 Product 16 CVEs

CVE Severity Distribution (All Time)

Critical

High

Medium

Low

Timeline Overview

Last 30 Days 0 CVEs

Last 6 Months 0 CVEs

Last Year 7 CVEs

Products

View all

gradio

9 Versions 16 CVEs

Recent CVEs

View all

CVE-2024-51751 MEDIUM 10 months ago

Gradio is an open-source Python package designed to enable quick builds of a demo or web application. If File or UploadButton components are used as …

CVE-2024-48052 MEDIUM 10 months, 1 week ago

In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within the save_…

CVE-2024-47870 UNKNOWN 11 months ago

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition** in the `update_root_in_confi…

CVE-2024-47872 UNKNOWN 11 months ago

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **Cross-Site Scripting (XSS)** on any Gradio serv…

CVE-2024-47084 UNKNOWN 11 months ago

Gradio is an open-source Python package designed for quick prototyping. This vulnerability is related to **CORS origin validation**, where the Gradio…

CVE-2024-47165 UNKNOWN 11 months ago

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a null origi…

CVE-2024-47167 UNKNOWN 11 months ago

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `…