Search for packages
| purl | pkg:pypi/gradio@6.6.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-64
Aliases: CVE-2026-28414 GHSA-39mp-8hj3-5c49 |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with … |
Vulnerable |
|
GHSA-6655-8ph2-63j3
Aliases: CVE-2026-10783 |
Gradio: Audio cache key ignores metadata when saving numpy audio outputs A security flaw has been discovered in gradio-app gradio … |
Vulnerable |
|
PYSEC-2026-2178
Aliases: CVE-2026-48545 GHSA-7hp7-4p35-3cx2 |
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting … |
Vulnerable |
|
PYSEC-2026-211
Aliases: CVE-2026-10783 GHSA-6655-8ph2-63j3 |
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache … | There are no reported fixed by versions. |
|
PYSEC-2026-2179
Aliases: CVE-2026-49119 GHSA-j36p-7w88-g82j |
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape … |
Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
PYSEC-2026-66
|
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability … |
CVE-2026-28416
GHSA-jmh7-g254-2cq9 |
|
PYSEC-2026-65
|
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth … |
CVE-2026-28415
GHSA-pfjf-5gxr-995x |
|
PYSEC-2026-63
|
Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version 6.6.0, Gradio … |
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m |