Description
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | gradio | <= 3.27.0 | — | GHSA-v4q9-qgqf-7jwp |
Medium · 4.8
CVE-2023-41626
EUVD-2023-2594GHSA-v4q9-qgqf-7jwpPYSEC-2026-1422
Gradio arbitrary file upload vulnerability
Published Sep 15, 2023 · Updated Sep 25, 2024 · Assigned by mitre