Skip to content
OpenAdvisories

Package · PyPI

gradio

52 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-4253 Public exploit

    Command Injection in gradio-app/gradio

    A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modi…

    gradio-app gradio-app/gradio gradio PyPI
  • High 7.5
    CVE-2024-1561 Public exploit Scanner template

    Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio

    An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by exploiting the `move_resource_to_block_cache()` met…

    gradio-app gradio-app/gradio gradio PyPI