Search for packages
| purl | pkg:pypi/gradio@5.12.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8jw3-6x8j-v96g
Aliases: CVE-2025-48889 |
Gradio Allows Unauthorized File Copy via Path Manipulation An arbitrary file copy vulnerability in Gradio's flagging feature allows unauthenticated attackers … |
Vulnerable |
|
PYSEC-2026-64
Aliases: CVE-2026-28414 GHSA-39mp-8hj3-5c49 |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps running on Window with … |
Vulnerable |
|
PYSEC-2026-66
Aliases: CVE-2026-28416 GHSA-jmh7-g254-2cq9 |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnerability … |
Vulnerable |
|
PYSEC-2026-65
Aliases: CVE-2026-28415 GHSA-pfjf-5gxr-995x |
Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio's OAuth … |
Vulnerable |
|
PYSEC-2026-63
Aliases: CVE-2026-27167 GHSA-h3h8-3v2v-rg7m |
Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior to version 6.6.0, Gradio … |
Vulnerable |
|
GHSA-6655-8ph2-63j3
Aliases: CVE-2026-10783 |
Gradio: Audio cache key ignores metadata when saving numpy audio outputs A security flaw has been discovered in gradio-app gradio … |
Vulnerable |
|
PYSEC-2026-1410
Aliases: CVE-2024-8966 GHSA-5cpq-9538-jm2j |
Gradio DOS in multipart boundry while uploading the file A vulnerability in the file upload process of gradio-app/gradio version @gradio/video@0.10.2 … | There are no reported fixed by versions. |
|
PYSEC-2026-1423
Aliases: CVE-2025-5320 GHSA-wmjh-cpqj-4v6x |
Gradio CORS Origin Validation Bypass Vulnerability A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. … | There are no reported fixed by versions. |
|
PYSEC-2026-2178
Aliases: CVE-2026-48545 GHSA-7hp7-4p35-3cx2 |
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting … |
Vulnerable |
|
PYSEC-2026-211
Aliases: CVE-2026-10783 GHSA-6655-8ph2-63j3 |
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache … | There are no reported fixed by versions. |
|
PYSEC-2026-2179
Aliases: CVE-2026-49119 GHSA-j36p-7w88-g82j |
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape … |
Not vulnerable Not vulnerable |