Advisory Weakness Curation

Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository gradio-app/gradio prior to main.

False positive This advisory has been marked as a False Positive and has been removed. CVE-2023-6572 is a GitHub Actions expression injection vulnerability in the gradio project's CI workflow file (`.github/workflows/generate-changeset.yml`). It affects the project's CI/CD infrastructure only, not the gradio library distributed via PyPI. The fix commit (5b5af18) removes an unquoted `echo` expression from a workflow file and has no impact on any released version of the gradio package.