Search for packages
| purl | pkg:pypi/gradio@5.31.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-64
Aliases: CVE-2026-28414 GHSA-39mp-8hj3-5c49 |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with … |
Vulnerable |
|
PYSEC-2026-66
Aliases: CVE-2026-28416 GHSA-jmh7-g254-2cq9 |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability … |
Vulnerable |
|
PYSEC-2026-65
Aliases: CVE-2026-28415 GHSA-pfjf-5gxr-995x |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth … |
Vulnerable |
|
PYSEC-2026-63
Aliases: CVE-2026-27167 GHSA-h3h8-3v2v-rg7m |
Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version 6.6.0, Gradio … |
Vulnerable |
|
GHSA-6655-8ph2-63j3
Aliases: CVE-2026-10783 |
Gradio: Audio cache key ignores metadata when saving numpy audio outputs A security flaw has been discovered in gradio-app gradio … |
Vulnerable |
|
PYSEC-2026-2178
Aliases: CVE-2026-48545 GHSA-7hp7-4p35-3cx2 |
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting … |
Vulnerable |
|
PYSEC-2026-211
Aliases: CVE-2026-10783 GHSA-6655-8ph2-63j3 |
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache … | There are no reported fixed by versions. |
|
PYSEC-2026-2179
Aliases: CVE-2026-49119 GHSA-j36p-7w88-g82j |
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-8jw3-6x8j-v96g
|
Gradio Allows Unauthorized File Copy via Path Manipulation An arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers … |
CVE-2025-48889
|
|
PYSEC-2025-119
|
Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, … |
CVE-2025-48889
GHSA-8jw3-6x8j-v96g |