gradio vulnerabilities (PyPI)
52 vulnerabilities.
-
gradioPyPI Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess() 8.7 High -
gradioPyPI gradio-app gradio Audio Cache Key save_audio_to_cache weak hash 2.0 Low -
gradioPyPI Gradio < 6.15.0 Cookie Injection via Shared Proxy Client 7.6 High -
gradioPyPI Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing 8.2 High -
gradioPyPI Gradio has Open Redirect in OAuth Flow 4.3 Medium -
gradioPyPI Gradio has Absolute Path Traversal on Windows with Python 3.13+ 7.5 High -
gradioPyPI Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret 0.0 None -
gradioPyPI Gradio Allows Unauthorized File Copy via Path Manipulation 5.3 Medium -
gradioPyPI gradio-app gradio CORS is_valid_origin privilege escalation 6.3 Medium -
gradioPyPI Open Redirect in gradio-app/gradio 5.4 Medium -
gradioPyPI Path Traversal in gradio-app/gradio 8.2 High -
gradioPyPI Path Traversal in gradio-app/gradio 5.3 Medium -
gradioPyPI Denial of Service in gradio-app/gradio 7.5 High -
gradioPyPI Zip Bomb Vulnerability in gradio-app/gradio 7.5 High -
gradioPyPI Regular Expression Denial of Service (ReDoS) in gradio-app/gradio 7.5 High -
gradioPyPI Gradio Blocked Path ACL Bypass Vulnerability 8.7 High -
gradioPyPI Arbitrary file read with File and UploadButton components in Gradio 6.5 Medium -
gradioPyPI gradio Server Side Request Forgery vulnerability 6.5 Medium -
gradioPyPI Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list 2.7 Low -
gradioPyPI Cross-site Scripting on Gradio server via upload of HTML files, JS files, or SVG files 6.9 Medium -
gradioPyPI Insecure communication between the FRP client and server in Gradio 8.2 High -
gradioPyPI Race condition in update_root_in_config may redirect user traffic in Gradio 7.1 High -
gradioPyPI Non-constant-time comparison when comparing hashes in Gradio 2.3 Low -
gradioPyPI Several components’ post-process steps may allow arbitrary file leaks in Gradio 6.3 Medium -
gradioPyPI Lack of integrity check on the downloaded FRP client in Gradio 2.1 Low -
gradioPyPI SSRF in the path parameter of /queue/join in Gradio 6.9 Medium -
gradioPyPI The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio 2.3 Low -
gradioPyPI One-level read path traversal in `/custom_component` in Gradio 2.3 Low -
gradioPyPI CORS origin validation accepts the null origin in Gradio 6.9 Medium -
gradioPyPI The `is_in_or_equal` function may be bypassed in Gradio 2.3 Low -
gradioPyPI CORS origin validation is not performed when the request has a cookie in Gradio 6.9 Medium -
gradioPyPI Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py 9.8 Critical -
gradioPyPI Open Redirect in gradio-app/gradio 5.4 Medium -
gradioPyPI Server-Side Request Forgery (SSRF) in gradio-app/gradio 8.6 High -
gradioPyPI Local File Inclusion in JSON component in gradio-app/gradio 7.5 High -
gradioPyPI Command Injection in gradio-app/gradio 7.5 High -
gradioPyPI Gradio's Component Server does not properly consider` _is_server_fn` for functions 6.5 Medium -
gradioPyPI Gradio allows credential leakage on Windows 7.5 High -
gradioPyPI Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio 7.5 High -
gradioPyPI SSRF Vulnerability in gradio-app/gradio 6.5 Medium -
gradioPyPI Local File Inclusion in gradio-app/gradio 7.5 High -
gradioPyPI SSRF Vulnerability in gradio-app/gradio 7.3 High -
gradioPyPI CSRF Vulnerability in gradio-app/gradio 4.3 Medium -
gradioPyPI Timing Attack Vulnerability in gradio-app/gradio 5.9 Medium -
gradioPyPI LFI in Gradio 7.5 High -
gradioPyPI Make the `/file` secure against file traversal attacks 5.6 Medium -
gradioPyPI Command Injection in gradio-app/gradio 9.6 Critical -
gradioPyPI Gradio arbitrary file upload vulnerability 4.8 Medium -
gradioPyPI Unfiltered paths in gradio 7.3 High -
gradioPyPI Gradio contains Use of Hard-coded Credentials 5.4 Medium - Show olderLoading…