Skip to content
OpenAdvisories

Vendor

gradio-app

50 known vulnerabilities.

Products

gradio 29 gradio-app/gradio 21
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2024-4254 Public exploit

    Secrets Exfiltration in gradio-app/gradio

    The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code…

    gradio-app gradio-app/gradio
  • High 7.5
    CVE-2024-4253 Public exploit

    Command Injection in gradio-app/gradio

    A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modi…

    gradio-app gradio-app/gradio gradio PyPI
  • High 7.5
    CVE-2024-1561 Public exploit Scanner template

    Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio

    An issue was discovered in gradio-app/gradio, where the `/component_server` endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled arguments. Specifically, by exploiting the `move_resource_to_block_cache()` met…

    gradio-app gradio-app/gradio gradio PyPI
  • High 8.6
    CVE-2024-1540 Public exploit

    Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow

    A command injection vulnerability exists in the deploy+test-visual.yml workflow of the gradio-app/gradio repository, due to improper neutralization of special elements used in a command. This vulnerability allows attackers to execute unauthorized commands, po…

    gradio-app gradio-app/gradio