gcdRadar
products/gradio

Gradio

Filed as: gradio

Records
57
Disclosed CVEs
57
Exploited (sev 3–4)
0
CISA KEV flagged
0

Newest record 2026-07-08 · 55 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Exploited or KEV-listed · 0

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

No record for Gradio has confirmed exploitation or a KEV flag.

Disclosures by month · last 24 months

Dec ’2419 disclosed · peak 8 in Mar ’25Nov ’26

Disclosed CVEs, no confirmed exploitation · 57

  1. closed7.4
    Gradio Gradio SSRF and Open Redirect Vulnerability CVE-2026-59806

    Disclosed · since 8 Jul 2026 · CVE-2026-59806

    AI
  2. closed8.7
    Gradio Gradio FileExplorer Path Traversal Vulnerability CVE-2026-49119

    Disclosed · since 1 Jul 2026 · CVE-2026-49119

    AI
  3. closed2.5
    Gradio CVE-2026-10783: Gradio audio cache key ignores metadata in hash generation

    Disclosed · since 4 Jun 2026 · CVE-2026-10783

    AI
  4. closed7.6
    Gradio CVE-2026-48545: Gradio cookie injection leads to cross-Space session fixation

    Disclosed · since 27 May 2026 · CVE-2026-48545

    AI
  5. closed4.3
    Gradio CVE-2026-28415: Gradio Open Redirect in OAuth Flow

    Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28415

    AI
  6. closed7.5
    Gradio CVE-2026-28414: Gradio Path Traversal Vulnerability on Windows

    Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28414

    AI
  7. closed0.0
    Gradio CVE-2026-27167: Gradio Mocked OAuth Login Exposes Server Credentials

    Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-27167

    AI
  8. closed8.2
    Gradio CVE-2026-28416: Gradio SSRF via Malicious proxy_url Injection

    Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28416

    AI
  9. closed3.7
    Gradio CVE-2025-5320: Gradio CORS Origin Validation Bypass Vulnerability

    Disclosed · since 29 May 2025 · CVE-2025-5320

    AI
  10. closed5.3
    Gradio CVE-2025-48889: Gradio Arbitrary File Copy Vulnerability

    Disclosed · since 29 May 2025 · updated 30 May 2025 · CVE-2025-48889

    AI
  11. closed7.5
    Gradio CVE-2025-0187: Denial of service vulnerability in Gradio file upload feature

    Disclosed · since 20 Mar 2025 · CVE-2025-0187

    AI
  12. closed6.5
    ChuanhuChatGPT CVE-2024-10707: Local file inclusion vulnerability in ChuanhuChatGPT

    Disclosed · since 20 Mar 2025 · CVE-2024-10707

    AI
  13. closed5.4
    Gradio CVE-2024-8021: Gradio Open Redirect Vulnerability Disclosed

    Disclosed · since 20 Mar 2025 · CVE-2024-8021

    AI
  14. closed7.5
    Gradio CVE-2024-10569: Gradio vulnerable to denial of service via zip bomb

    Disclosed · since 20 Mar 2025 · CVE-2024-10569

    AI
  15. closed8.2
    Gradio CVE-2024-10648: Gradio Vulnerable to Arbitrary File Deletion

    Disclosed · since 20 Mar 2025 · CVE-2024-10648

    AI
  16. closed7.5
    Gradio CVE-2024-8966: Gradio denial of service via multipart boundary file upload

    Disclosed · since 20 Mar 2025 · CVE-2024-8966

    AI
  17. closed5.3
    Gradio CVE-2024-12217: Gradio Path Traversal via NTFS Alternate Data Streams

    Disclosed · since 20 Mar 2025 · CVE-2024-12217

    AI
  18. closed7.5
    Gradio CVE-2024-10624: Gradio Vulnerable to Denial of Service via Crafted HTTP Request

    Disclosed · since 20 Mar 2025 · CVE-2024-10624

    AI
  19. closed9.1
    Gradio CVE-2025-23042: Gradio blocked path ACL bypass vulnerability

    Disclosed · since 14 Jan 2025 · CVE-2025-23042

    AI
  20. closed6.9
    Gradio CVE-2024-51751: Arbitrary file read vulnerability in Gradio components

    Disclosed · since 6 Nov 2024 · CVE-2024-51751

    AI
  21. closed6.5
    Gradio CVE-2024-48052: Gradio Server Side Request Forgery Vulnerability

    Disclosed · since 5 Nov 2024 · updated 5 Nov 2024 · CVE-2024-48052

    AI
  22. closed7.5
    Gradio CVE-2024-47867: Gradio lacks FRP client integrity checking

    Disclosed · since 10 Oct 2024 · CVE-2024-47867

    AI
  23. closed6.9
    Gradio CVE-2024-47868: Gradio component post-processing file leaks

    Disclosed · since 10 Oct 2024 · CVE-2024-47868

    AI
  24. closed5.4
    Gradio CVE-2024-47872: Gradio cross-site scripting via file uploads

    Disclosed · since 10 Oct 2024 · CVE-2024-47872

    AI
  25. closed6.3
    Gradio CVE-2024-47869: Gradio non-constant-time hash comparison

    Disclosed · since 10 Oct 2024 · CVE-2024-47869

    AI
  26. closed6.9
    Gradio CVE-2024-47164: Gradio directory traversal vulnerability

    Disclosed · since 10 Oct 2024 · CVE-2024-47164

    AI
  27. closed6.9
    Gradio CVE-2024-47166: Gradio path traversal in custom component endpoint

    Disclosed · since 10 Oct 2024 · CVE-2024-47166

    AI
  28. closed7.2
    Gradio CVE-2024-47167: Gradio vulnerable to SSRF in queue join endpoint

    Disclosed · since 10 Oct 2024 · CVE-2024-47167

    AI
  29. closed4.3
    Gradio CVE-2024-47168: Gradio monitoring endpoint accessible when disabled

    Disclosed · since 10 Oct 2024 · CVE-2024-47168

    AI
  30. closed5.4
    Gradio CVE-2024-47165: Gradio CORS origin validation accepts null origin

    Disclosed · since 10 Oct 2024 · CVE-2024-47165

    AI
  31. closed
    Gradio Gradio dropdown validation bypass vulnerability

    Disclosed · since 10 Oct 2024

    AI
  32. closed8.6
    Gradio CVE-2024-47871: Gradio uses insecure communication between FRP client and server

    Disclosed · since 10 Oct 2024 · CVE-2024-47871

    AI
  33. closed8.8
    Gradio CVE-2024-47870: Gradio race condition allows traffic redirection

    Disclosed · since 10 Oct 2024 · CVE-2024-47870

    AI
  34. closed8.8
    Gradio CVE-2024-47084: Gradio lacks CORS origin validation when cookies are present

    Disclosed · since 10 Oct 2024 · CVE-2024-47084

    AI
  35. closed9.8
    Gradio CVE-2024-39236: Code injection vulnerability in Gradio component_meta.py

    Disclosed · since 1 Jul 2024 · CVE-2024-39236

    AI
  36. closed5.4
    Gradio CVE-2024-4940: Open redirect vulnerability in gradio

    Disclosed · since 22 Jun 2024 · CVE-2024-4940

    AI
  37. closed8.6
    Gradio CVE-2024-4325: SSRF Vulnerability in Gradio

    Disclosed · since 6 Jun 2024 · CVE-2024-4325

    AI
  38. closed7.5
    Gradio CVE-2024-4941: Local file inclusion in Gradio JSON component

    Disclosed · since 6 Jun 2024 · CVE-2024-4941

    AI
  39. closed7.1
    Gradio CVE-2024-4254: Gradio Website Deployment Workflow Secrets Exfiltration

    Disclosed · since 4 Jun 2024 · CVE-2024-4254

    AI
  40. closed7.5
    Gradio CVE-2024-4253: Gradio Repository Workflow Command Injection Vulnerability

    Disclosed · since 4 Jun 2024 · CVE-2024-4253

    AI
  41. closed7.5
    Gradio CVE-2024-34510: Gradio credential leakage vulnerability on Windows

    Disclosed · since 5 May 2024 · CVE-2024-34510

    AI
  42. closed6.5
    Gradio CVE-2024-34511: Gradio component server function handling flaw

    Disclosed · since 5 May 2024 · CVE-2024-34511

    AI
  43. closed6.5
    Gradio Gradio Server-Side Request Forgery Vulnerability

    Disclosed · since 16 Apr 2024 · CVE-2024-1183

    AI
  44. closed7.5
    Gradio CVE-2024-1561: gradio vulnerable to Path Traversal

    Disclosed · since 16 Apr 2024 · CVE-2024-1561

    AI
  45. closed9.2
    Gradio CVE-2024-1728: Gradio arbitrary file access vulnerability

    Disclosed · since 25 Sep 2024 · updated 25 Sep 2024 · CVE-2024-1728

    AI
  46. closed
    Gradio Gradio Local File Inclusion Vulnerability in UploadButton

    Disclosed · since 10 Apr 2024

    AI
  47. closed8.6
    Gradio CVE-2024-1540: Gradio Workflow Command Injection Vulnerability

    Disclosed · since 27 Mar 2024 · CVE-2024-1540

    AI
  48. closed7.3
    Gradio CVE-2024-2206: Gradio Server-Side Request Forgery vulnerability

    Disclosed · since 27 Mar 2024 · CVE-2024-2206

    AI
  49. closed4.3
    Gradio CVE-2024-1727: Gradio Local Route Access Vulnerability

    Disclosed · since 21 May 2024 · updated 21 May 2024 · CVE-2024-1727

    AI
  50. closed5.9
    Gradio CVE-2024-1729: Gradio apps vulnerable to timing attacks to guess password

    Disclosed · since 22 Feb 2024 · updated 29 Mar 2024 · CVE-2024-1729

    AI
  51. closed7.5
    Gradio CVE-2024-0964: Gradio Path Traversal Vulnerability

    Disclosed · since 6 Feb 2024 · updated 6 Feb 2024 · CVE-2024-0964

    AI
  52. closed8.6
    Gradio CVE-2023-51449: File traversal and SSRF vulnerability in Gradio

    Disclosed · since 21 Dec 2023 · updated 22 Dec 2023 · CVE-2023-51449

    AI
  53. closed9.6
    Gradio CVE-2023-6572: Information exposure vulnerability in Gradio

    Disclosed · since 14 Dec 2023 · CVE-2023-6572

    AI
  54. closed4.8
    Gradio CVE-2023-41626: Arbitrary file upload vulnerability in Gradio upload interface

    Disclosed · since 15 Sep 2023 · CVE-2023-41626

    AI
  55. closed7.3
    Gradio CVE-2023-34239: Gradio arbitrary file read and URL proxying vulnerabilities

    Disclosed · since 9 Jun 2023 · updated 9 Jun 2023 · CVE-2023-34239

    AI
  56. closed6.3
    Gradio CVE-2023-25823: Gradio exposes private SSH keys in share links

    Disclosed · since 23 Feb 2023 · CVE-2023-25823

    AI
  57. closed9.3
    Gradio CVE-2021-43831: Local file access vulnerability in Gradio interface

    Disclosed · since 21 Jan 2022 · updated 21 Jan 2022 · CVE-2021-43831

    AI

Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.