Skip to content
OpenAdvisories

Vendor

gradio-app

50 known vulnerabilities.

Products

gradio 29 gradio-app/gradio 21
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2024-47167 Public exploit

    SSRF in the path parameter of /queue/join in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server…

    gradio-app gradio gradio PyPI