Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

gradio-app/gradio — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in gradio-app/gradio, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities for gradio-app/gradio, a popular open-source Python library used to build web interfaces for machine learning models. The collection covers a broad range of weaknesses, including command injection, cross-site scripting, and insecure deserialization issues identified across multiple versions. Readers can use this hub to track the vendor's published advisories, analyze recurring weakness classes, and review the product's historical vulnerability trends over time. No specific CVE identifiers are listed in this summary; the page focuses on categorizing and contextualizing known defects to support security auditing and patch prioritization.

Vendor: gradio-app

CVE ID Title CVSS Severity Published
CVE-2024-8021 Open Redirect in gradio-app/gradio CWE-601 6.1 - 2025-03-20
CVE-2024-10648 Path Traversal in gradio-app/gradio CWE-29 9.1 - 2025-03-20
CVE-2024-12217 Path Traversal in gradio-app/gradio CWE-22 3.3 - 2025-03-20
CVE-2024-8966 Denial of Service in gradio-app/gradio CWE-770 7.5 - 2025-03-20
CVE-2024-10569 Zip Bomb Vulnerability in gradio-app/gradio CWE-475 7.5 - 2025-03-20
CVE-2024-10624 Regular Expression Denial of Service (ReDoS) in gradio-app/gradio CWE-1333 7.5 - 2025-03-20
CVE-2025-0187 Denial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradio CWE-400 7.5 - 2025-03-20
CVE-2024-4940 Open Redirect in gradio-app/gradio CWE-601 6.1 - 2024-06-22
CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio CWE-918 7.5AI High AI 2024-06-06
CVE-2024-4941 Local File Inclusion in JSON component in gradio-app/gradio CWE-22 7.5AI High AI 2024-06-06
CVE-2024-4254 Secrets Exfiltration in gradio-app/gradio CWE-214 6.5AI Medium AI 2024-06-04
CVE-2024-4253 Command Injection in gradio-app/gradio CWE-78 9.8AI Critical AI 2024-06-04
CVE-2024-1561 Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio CWE-29 7.5 - 2024-04-16
CVE-2024-1183 SSRF Vulnerability in gradio-app/gradio CWE-601 5.3 - 2024-04-16
CVE-2024-1728 Local File Inclusion in gradio-app/gradio CWE-22 9.8AI Critical AI 2024-04-10
CVE-2024-1729 Timing Attack Vulnerability in gradio-app/gradio CWE-367 5.9AI Medium AI 2024-03-29
CVE-2024-1540 Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow CWE-77 7.5 - 2024-03-27
CVE-2024-2206 SSRF Vulnerability in gradio-app/gradio CWE-918 7.1 - 2024-03-27
CVE-2024-1727 CSRF Vulnerability in gradio-app/gradio CWE-352 7.1 - 2024-03-21
CVE-2024-0964 LFI in Gradio CWE-22 9.8 - 2024-02-05
CVE-2023-6572 Command Injection in gradio-app/gradio CWE-77 7.5AI High AI 2023-12-14

All 21 known CVE vulnerabilities affecting gradio-app/gradio with full Chinese analysis, references, and POCs where available.