Gradio-app vulnerabilities
50 CVEs and advisories name Gradio-app as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-47168The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio
- CVE-2024-4940Open Redirect in gradio-app/gradio
- CVE-2024-4325Server-Side Request Forgery (SSRF) in gradio-app/gradio
- CVE-2024-4941Local File Inclusion in JSON component in gradio-app/gradio
- CVE-2024-4254Secrets Exfiltration in gradio-app/gradio
- CVE-2024-4253Command Injection in gradio-app/gradio
- CVE-2024-1561Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio
- CVE-2024-1183SSRF Vulnerability in gradio-app/gradio
- CVE-2024-1728Local File Inclusion in gradio-app/gradio
- CVE-2024-1729Timing Attack Vulnerability in gradio-app/gradio
- CVE-2024-1540Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow
- CVE-2024-2206SSRF Vulnerability in gradio-app/gradio
- CVE-2024-1727CSRF Vulnerability in gradio-app/gradio
- CVE-2024-0964LFI in Gradio
- CVE-2023-51449Make the `/file` secure against file traversal attacks
- CVE-2023-6572Command Injection in gradio-app/gradio
- CVE-2023-34239Unfiltered paths in gradio
- CVE-2023-25823Gradio contains Use of Hard-coded Credentials
- CVE-2022-24770Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
- CVE-2021-43831Files on the host computer can be accessed from the Gradio interface