gradio

Records34

1. closed2.5
   Gradio CVE-2026-10783: Gradio audio cache key ignores metadata in hash generation

   Patch now · Disclosed · since 4 Jun 2026 · CVE-2026-10783

   AI
2. closed7.3
   Bert-VITS2 CVE-2026-8756: Path traversal vulnerability in fishaudio Bert-VITS2 webui

   Patch now · Disclosed · since 17 May 2026 · CVE-2026-8756

   AI
3. closed4.3
   Gradio CVE-2026-28415: Gradio Open Redirect in OAuth Flow

   Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28415

   AI
4. closed7.5
   Gradio CVE-2026-28414: Gradio Path Traversal Vulnerability on Windows

   Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28414

   AI
5. closed0.0
   Gradio CVE-2026-27167: Gradio Mocked OAuth Login Exposes Server Credentials

   Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-27167

   AI
6. closed8.2
   Gradio CVE-2026-28416: Gradio SSRF via Malicious proxy_url Injection

   Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28416

   AI
7. closed3.7
   Gradio CVE-2025-5320: Gradio CORS Origin Validation Bypass Vulnerability

   Patch now · Disclosed · since 29 May 2025 · CVE-2025-5320

   AI
8. closed5.3
   Gradio CVE-2025-48889: Gradio Arbitrary File Copy Vulnerability

   Patch now · Disclosed · since 29 May 2025 · updated 30 May 2025 · CVE-2025-48889

   AI
9. closed7.5
   LLaVA CVE-2024-12065: Local file inclusion vulnerability in LLaVA gradio UI

   Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12065

   AI
10. closed5.4
    Gradio CVE-2024-8021: Gradio Open Redirect Vulnerability Disclosed

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8021

    AI
11. closed7.5
    Gradio CVE-2024-8966: Gradio denial of service via multipart boundary file upload

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8966

    AI
12. closed5.3
    Gradio CVE-2024-12217: Gradio Path Traversal via NTFS Alternate Data Streams

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12217

    AI
13. closed6.5
    Gradio CVE-2024-48052: Gradio Server Side Request Forgery Vulnerability

    Patch now · Disclosed · since 5 Nov 2024 · updated 5 Nov 2024 · CVE-2024-48052

    AI
14. closed7.5
    Gradio CVE-2024-47867: Gradio lacks FRP client integrity checking

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47867

    AI
15. closed6.9
    Gradio CVE-2024-47868: Gradio component post-processing file leaks

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47868

    AI
16. closed5.4
    Gradio CVE-2024-47872: Gradio cross-site scripting via file uploads

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47872

    AI
17. closed6.3
    Gradio CVE-2024-47869: Gradio non-constant-time hash comparison

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47869

    AI
18. closed6.9
    Gradio CVE-2024-47164: Gradio directory traversal vulnerability

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47164

    AI
19. closed6.9
    Gradio CVE-2024-47166: Gradio path traversal in custom component endpoint

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47166

    AI
20. closed7.2
    Gradio CVE-2024-47167: Gradio vulnerable to SSRF in queue join endpoint

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47167

    AI
21. closed4.3
    Gradio CVE-2024-47168: Gradio monitoring endpoint accessible when disabled

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47168

    AI
22. closed5.4
    Gradio CVE-2024-47165: Gradio CORS origin validation accepts null origin

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47165

    AI
23. closed
    Gradio Gradio dropdown validation bypass vulnerability

    Patch now · Disclosed · since 10 Oct 2024

    AI
24. closed8.6
    Gradio CVE-2024-47871: Gradio uses insecure communication between FRP client and server

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47871

    AI
25. closed8.8
    Gradio CVE-2024-47870: Gradio race condition allows traffic redirection

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47870

    AI
26. closed8.8
    Gradio CVE-2024-47084: Gradio lacks CORS origin validation when cookies are present

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47084

    AI
27. closed8.6
    Gradio CVE-2024-4325: SSRF Vulnerability in Gradio

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4325

    AI
28. closed7.5
    Gradio CVE-2024-34510: Gradio credential leakage vulnerability on Windows

    Patch now · Disclosed · since 5 May 2024 · CVE-2024-34510

    AI
29. closed6.5
    Gradio CVE-2024-34511: Gradio component server function handling flaw

    Patch now · Disclosed · since 5 May 2024 · CVE-2024-34511

    AI
30. closed
    Gradio Gradio Local File Inclusion Vulnerability in UploadButton

    Patch now · Disclosed · since 10 Apr 2024

    AI
31. closed7.3
    Gradio CVE-2024-2206: Gradio Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 27 Mar 2024 · CVE-2024-2206

    AI
32. closed7.5
    Gradio CVE-2024-0964: Gradio Path Traversal Vulnerability

    Patch now · Disclosed · since 6 Feb 2024 · updated 6 Feb 2024 · CVE-2024-0964

    AI
33. closed6.3
    Gradio CVE-2023-25823: Gradio exposes private SSH keys in share links

    Patch now · Disclosed · since 23 Feb 2023 · CVE-2023-25823

    AI
34. closed9.3
    Gradio CVE-2021-43831: Local file access vulnerability in Gradio interface

    Patch now · Disclosed · since 21 Jan 2022 · updated 21 Jan 2022 · CVE-2021-43831

    AI