Browse CVEs

HIGH 7.5 CVE-2025-0187 A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1. The vulnerability is due to im… Gradio No fix yet Fix from $1,9502025-03-20 MEDIUM 6.1 CVE-2024-8021 An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicio… Gradio No fix yet Fix from $1,6002025-03-20 HIGH 8.2 CVE-2024-10648 A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an att… Gradio No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-10569 A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to… Gradio No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-10624 A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The aff… Gradio No fix yet Fix from $1,9502025-03-20 CRITICAL 9.8 CVE-2024-39236 Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered … Gradio No fix yet Fix from $2,3002024-07-01 MEDIUM 6.1 CVE-2024-4940 An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users … Gradio No fix yet Fix from $1,6002024-06-22 HIGH 7.1 CVE-2024-4254 The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due t… Gradio No fix yet Fix from $1,9502024-06-04