Skip to content
OpenAdvisories

Package · PyPI

gradio-pdf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.6
    GHSA-4m3g-6r7g-jv4f

    Arbitrary JavaScript execution due to using outdated libraries

    ### Summary gradio-pdf projects with dependencies on the pdf.js library are vulnerable to CVE-2024-4367, which allows arbitrary JavaScript execution. ### PoC 1. Generate a pdf file with a malicious script in the fontmatrix. (This will run `alert(‘XSS’)`.) [po…

    gradio-pdf PyPI