Vulnerabilidades en gradio-app

50 resultados
Análisis Vexday

A Gradio registra 50 vulnerabilidades no histórico, com apenas 1 crítica e nenhuma sob ataque ativo no momento, reduzindo a urgência imediata. A fraqueza dominante é path traversal (CWE-22), padrão em aplicações web, e 4 novos registros nos últimos 90 dias indicam descobertas contínuas, mas em ritmo moderado. O risco está contido enquanto não houver exploração ativa, exigindo vigilância rotineira sobre patches.

CVE-2024-47164LOWThe `is_in_or_equal` function may be bypassed in GradioEPSS 0.7%CVE-2026-49119HIGHGradio < 6.16.0 Path Traversal via FileExplorer.preprocess()EPSS 0.7%CVE-2025-0187HIGHDenial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradioEPSS 0.7%CVE-2024-51751MEDIUMArbitrary file read with File and UploadButton components in GradioEPSS 0.7%CVE-2024-10648HIGHPath Traversal in gradio-app/gradioEPSS 0.7%CVE-2023-34239HIGHUnfiltered paths in gradioEPSS 0.7%CVE-2024-12217MEDIUMPath Traversal in gradio-app/gradioEPSS 0.6%CVE-2025-48889MEDIUMGradio Allows Unauthorized File Copy via Path ManipulationEPSS 0.6%CVE-2024-10569HIGHZip Bomb Vulnerability in gradio-app/gradioEPSS 0.6%CVE-2023-25823MEDIUMGradio contains Use of Hard-coded CredentialsEPSS 0.6%CVE-2024-47084MEDIUMCORS origin validation is not performed when the request has a cookie in GradioEPSS 0.5%CVE-2024-1729MEDIUMTiming Attack Vulnerability in gradio-app/gradioEPSS 0.5%CVE-2024-47167MEDIUMSSRF in the path parameter of /queue/join in GradioEPSS 0.5%CVE-2024-4254HIGHSecrets Exfiltration in gradio-app/gradioEPSS 0.5%CVE-2026-27167NONEGradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session SecretEPSS 0.5%CVE-2024-47166LOWOne-level read path traversal in `/custom_component` in GradioEPSS 0.4%CVE-2024-2206HIGHSSRF Vulnerability in gradio-app/gradioEPSS 0.4%CVE-2024-47870HIGHRace condition in update_root_in_config may redirect user traffic in GradioEPSS 0.4%CVE-2024-1727MEDIUMCSRF Vulnerability in gradio-app/gradioEPSS 0.4%CVE-2026-48545HIGHGradio < 6.15.0 Cookie Injection via Shared Proxy ClientEPSS 0.4%