gradio (PyPI)
Advisories
105
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 6.16.0 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "gradio>=6.16.0"poetry
poetry add "gradio>=6.16.0"uv
uv add "gradio>=6.16.0"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-j36p-7w88-g82j Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks |
High EPSS 0.69% |
< 6.16.0 | 6.16.0 |
| GHSA-j36p-7w88-g82j Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks |
High EPSS 0.69% |
< 6.16.0 | 6.16.0 |
| GHSA-6655-8ph2-63j3 Gradio: Audio cache key ignores metadata when saving numpy audio outputs |
Low EPSS 0.11% |
< 6.15.1 | 6.15.1 |
| GHSA-6655-8ph2-63j3 Gradio: Audio cache key ignores metadata when saving numpy audio outputs |
Low EPSS 0.11% |
<= 6.14.0 | No fix yet |
| GHSA-7hp7-4p35-3cx2 Gradio contains a cookie injection vulnerability |
Medium EPSS 0.35% |
< 6.15.0 | 6.15.0 |
| GHSA-7hp7-4p35-3cx2 Gradio contains a cookie injection vulnerability |
Medium EPSS 0.35% |
< 6.15.0 | 6.15.0 |
| GHSA-jmh7-g254-2cq9 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing |
High EPSS 7.26% |
< 6.6.0 | 6.6.0 |
| GHSA-jmh7-g254-2cq9 Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing |
High EPSS 7.26% |
< 6.6.0 | 6.6.0 |
| GHSA-pfjf-5gxr-995x Gradio has an Open Redirect in its OAuth Flow |
Medium EPSS 0.29% |
< 6.6.0 | 6.6.0 |
| GHSA-pfjf-5gxr-995x Gradio has an Open Redirect in its OAuth Flow |
Medium EPSS 0.29% |
< 6.6.0 | 6.6.0 |
| GHSA-39mp-8hj3-5c49 Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+ |
High EPSS 3.06% |
< 6.7.0 | 6.7.0 |
| GHSA-39mp-8hj3-5c49 Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+ |
High EPSS 3.06% |
< 6.7.0 | 6.7.0 |
| GHSA-h3h8-3v2v-rg7m Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret |
Medium EPSS 0.51% |
>= 4.16.0, < 6.6.0 | 6.6.0 |
| GHSA-h3h8-3v2v-rg7m Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret |
Medium EPSS 0.51% |
>= 4.16.0, < 6.6.0 | 6.6.0 |
| GHSA-8jw3-6x8j-v96g Gradio Allows Unauthorized File Copy via Path Manipulation |
High EPSS 0.69% |
< 5.31.0 | 5.31.0 |
| GHSA-8jw3-6x8j-v96g Gradio Allows Unauthorized File Copy via Path Manipulation |
High EPSS 0.69% |
>= 5.25.2, < 5.31.0 | 5.31.0 |
| GHSA-wmjh-cpqj-4v6x Gradio CORS Origin Validation Bypass Vulnerability |
Low EPSS 0.27% |
>= 5.0.0, <= 5.29.1 | No fix yet |
| GHSA-wmjh-cpqj-4v6x Gradio CORS Origin Validation Bypass Vulnerability |
Low EPSS 0.27% |
>= 5.0.0, <= 5.29.1 | No fix yet |
| GHSA-5cpq-9538-jm2j Gradio DOS in multipart boundry while uploading the file |
High EPSS 0.81% |
<= 5.22.0 | No fix yet |
| GHSA-5cpq-9538-jm2j Gradio DOS in multipart boundry while uploading the file |
High EPSS 0.81% |
<= 5.22.0 | No fix yet |
| GHSA-7v2w-h4gh-w5cv Gradio Vulnerable to Open Redirect |
Medium EPSS 0.76% |
<= 4.37.2 | No fix yet |
| GHSA-7v2w-h4gh-w5cv Gradio Vulnerable to Open Redirect |
Medium EPSS 0.76% |
<= 4.37.2 | No fix yet |
| GHSA-prpg-p95c-32fv Gradio Path Traversal vulnerability |
Medium EPSS 0.70% |
<= 5.0.1 | No fix yet |
| GHSA-prpg-p95c-32fv Gradio Path Traversal vulnerability |
Medium EPSS 0.70% |
<= 5.0.1 | No fix yet |
| GHSA-pgfv-gvc5-prfg Gradio Vulnerable to Arbitrary File Deletion |
High EPSS 0.73% |
>= 4.0.0, <= 5.0.0b2 | No fix yet |
| GHSA-pgfv-gvc5-prfg Gradio Vulnerable to Arbitrary File Deletion |
High EPSS 0.73% |
>= 4.0.0, <= 5.0.0b2 | No fix yet |
| GHSA-rvgh-pr46-x7gg Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request |
High EPSS 1.10% |
>= 4.38.0, <= 5.0.0-beta.2 | No fix yet |
| GHSA-rvgh-pr46-x7gg Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request |
High EPSS 1.10% |
>= 4.38.0, <= 5.0.0-beta.2 | No fix yet |
| GHSA-7xmc-vhjp-qv5q Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb |
High EPSS 0.66% |
>= 4.0.0, <= 5.0.0b2 | No fix yet |
| GHSA-7xmc-vhjp-qv5q Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb |
High EPSS 0.66% |
>= 4.0.0, <= 5.0.0b2 | No fix yet |
| GHSA-j2jg-fq62-7c3h Gradio Blocked Path ACL Bypass Vulnerability |
High EPSS 1.00% |
< 5.11.0 | 5.11.0 |
| GHSA-j2jg-fq62-7c3h Gradio Blocked Path ACL Bypass Vulnerability |
High EPSS 1.00% |
< 5.6.0 | 5.6.0 |
| GHSA-rhm9-gp5p-5248 Gradio vulnerable to arbitrary file read with File and UploadButton components |
Medium EPSS 0.68% |
>= 5.0.0, < 5.5.0 | 5.5.0 |
| GHSA-rhm9-gp5p-5248 Gradio vulnerable to arbitrary file read with File and UploadButton components |
Medium EPSS 0.68% |
>= 5.0.0, < 5.5.0 | 5.5.0 |
| GHSA-3gf9-wv65-gwh9 gradio Server Side Request Forgery vulnerability |
Medium EPSS 0.47% |
<= 4.42.0 | No fix yet |
| GHSA-3gf9-wv65-gwh9 gradio Server Side Request Forgery vulnerability |
Medium EPSS 0.47% |
<= 4.42.0 | No fix yet |
| GHSA-26jh-r8g2-6fpr Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list |
Medium | < 5.0.0 | 5.0.0 |
| GHSA-gvv6-33j7-884g Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files |
Medium EPSS 0.28% |
< 5.0.0 | 5.0.0 |
| GHSA-gvv6-33j7-884g Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files |
Medium EPSS 0.28% |
< 5.0.0 | 5.0.0 |
| GHSA-279j-x4gx-hfrh Gradio uses insecure communication between the FRP client and server |
Critical EPSS 0.18% |
< 5.0.0 | 5.0.0 |
| GHSA-279j-x4gx-hfrh Gradio uses insecure communication between the FRP client and server |
Critical EPSS 0.18% |
< 5.0.0 | 5.0.0 |
| GHSA-xh2x-3mrm-fwqm Gradio has a race condition in update_root_in_config may redirect user traffic |
High EPSS 0.37% |
< 5.0.0 | 5.0.0 |
| GHSA-xh2x-3mrm-fwqm Gradio has a race condition in update_root_in_config may redirect user traffic |
High EPSS 0.37% |
< 5.0.0 | 5.0.0 |
| GHSA-j757-pf57-f8r4 Gradio performs a non-constant-time comparison when comparing hashes |
Low EPSS 0.29% |
< 4.44.0 | 4.44.0 |
| GHSA-j757-pf57-f8r4 Gradio performs a non-constant-time comparison when comparing hashes |
Low EPSS 0.29% |
< 4.44.0 | 4.44.0 |
| GHSA-4q3c-cj7g-jcwf Gradio has several components with post-process steps allow arbitrary file leaks |
High EPSS 0.82% |
< 5.0.0 | 5.0.0 |
| GHSA-4q3c-cj7g-jcwf Gradio has several components with post-process steps allow arbitrary file leaks |
High EPSS 0.82% |
< 5.0.0 | 5.0.0 |
| GHSA-8c87-gvhj-xm8m Gradio lacks integrity checking on the downloaded FRP client |
High EPSS 0.21% |
< 5.0.0 | 5.0.0 |
| GHSA-8c87-gvhj-xm8m Gradio lacks integrity checking on the downloaded FRP client |
High EPSS 0.21% |
< 5.0.0 | 5.0.0 |
| GHSA-hm3c-93pg-4cxw In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring |
Medium EPSS 0.33% |
< 4.44.0 | 4.44.0 |
| GHSA-hm3c-93pg-4cxw In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring |
Medium EPSS 0.33% |
< 4.44.0 | 4.44.0 |
| GHSA-576c-3j53-r9jj Gradio vulnerable to SSRF in the path parameter of /queue/join |
Critical EPSS 0.48% |
< 5.0.0 | 5.0.0 |
| GHSA-576c-3j53-r9jj Gradio vulnerable to SSRF in the path parameter of /queue/join |
Critical EPSS 0.48% |
< 5.0.0 | 5.0.0 |
| GHSA-37qc-qgx6-9xjv Gradio has a one-level read path traversal in `/custom_component` |
Medium EPSS 0.44% |
< 4.44.0 | 4.44.0 |
| GHSA-37qc-qgx6-9xjv Gradio has a one-level read path traversal in `/custom_component` |
Medium EPSS 0.44% |
< 4.44.0 | 4.44.0 |
| GHSA-89v2-pqfv-c5r9 Gradio's CORS origin validation accepts the null origin |
Medium EPSS 0.30% |
< 5.0.0 | 5.0.0 |
| GHSA-89v2-pqfv-c5r9 Gradio's CORS origin validation accepts the null origin |
Medium EPSS 0.30% |
< 5.0.0 | 5.0.0 |
| GHSA-77xq-6g77-h274 Gradio's `is_in_or_equal` function may be bypassed |
Medium EPSS 0.70% |
< 5.0.0 | 5.0.0 |
| GHSA-77xq-6g77-h274 Gradio's `is_in_or_equal` function may be bypassed |
Medium EPSS 0.70% |
< 5.0.0 | 5.0.0 |
| GHSA-3c67-5hwx-f6wx Gradios's CORS origin validation is not performed when the request has a cookie |
High EPSS 0.53% |
< 4.44.0 | 4.44.0 |
| GHSA-3c67-5hwx-f6wx Gradios's CORS origin validation is not performed when the request has a cookie |
High EPSS 0.53% |
< 4.44.0 | 4.44.0 |
| GHSA-9v2f-6vcg-3hgv Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py |
Critical EPSS 0.86% |
No fix yet | |
| GHSA-9v2f-6vcg-3hgv Withdrawn Advisory: Gradio was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py |
Critical EPSS 0.86% |
<= 4.36.1 | No fix yet |
| GHSA-g6c9-f4xm-9j4x Open redirect in gradio |
Medium EPSS 1.02% |
<= 4.36.1 | No fix yet |
| GHSA-g6c9-f4xm-9j4x Open redirect in gradio |
Medium EPSS 1.02% |
<= 4.36.1 | No fix yet |
| GHSA-973g-55hp-3frw Server-Side Request Forgery in gradio |
High EPSS 37.11% |
<= 4.36.0 | No fix yet |
| GHSA-973g-55hp-3frw Server-Side Request Forgery in gradio |
High EPSS 37.11% |
<= 4.36.0 | No fix yet |
| GHSA-6v6g-j5fq-hpvw Local file inclusion in gradio |
High EPSS 0.83% |
< 4.31.3 | 4.31.3 |
| GHSA-6v6g-j5fq-hpvw Local file inclusion in gradio |
High EPSS 0.83% |
< 4.31.4 | 4.31.4 |
| PYSEC-2024-321 A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. |
Critical EPSS 1.70% |
< 4.29.0 | 4.29.0 |
| GHSA-34rf-p3r3-58x2 Gradio's Component Server does not properly consider` _is_server_fn` for functions |
Medium | < 4.13.0 | 4.13.0 |
| GHSA-34rf-p3r3-58x2 Gradio's Component Server does not properly consider` _is_server_fn` for functions |
Medium | < 4.13.0 | 4.13.0 |
| GHSA-rvfh-h6c7-fc3c Gradio allows credential leakage on Windows |
High EPSS 0.67% |
< 4.20.0 | 4.20.0 |
| GHSA-rvfh-h6c7-fc3c Gradio allows credential leakage on Windows |
High EPSS 0.67% |
< 4.20.0 | 4.20.0 |
| GHSA-g9cj-cfpp-4g2x gradio vulnerable to Path Traversal |
High EPSS 9.31% |
< 4.13.0 | 4.13.0 |
| GHSA-g9cj-cfpp-4g2x gradio vulnerable to Path Traversal |
High EPSS 9.31% |
< 4.13.0 | 4.13.0 |
| GHSA-qh6x-j82h-vpf9 gradio Server-Side Request Forgery vulnerability |
Medium EPSS 1.80% |
< 4.10.0 | 4.10.0 |
| GHSA-qh6x-j82h-vpf9 gradio Server-Side Request Forgery vulnerability |
Medium EPSS 1.80% |
< 4.10.0 | 4.10.0 |
| GHSA-3f95-mxq2-2f63 Duplicate Advisory: Gradio Local File Inclusion vulnerability Withdrawn |
High | < 4.19.2 | 4.19.2 |
| GHSA-m842-4qm8-7gpq Gradio allows users to access arbitrary files |
High EPSS 85.39% |
< 4.19.2 | 4.19.2 |
| GHSA-m842-4qm8-7gpq Gradio allows users to access arbitrary files |
High EPSS 85.39% |
< 4.19.2 | 4.19.2 |
| GHSA-xcgp-r7r8-2hc9 Gradio's CI vulnerable to Command Injection Withdrawn |
High EPSS 1.98% |
< 4.18.0 | 4.18.0 |
| GHSA-r364-m2j9-mf4h gradio Server-Side Request Forgery vulnerability |
Medium EPSS 0.42% |
< 4.18.0 | 4.18.0 |
| GHSA-r364-m2j9-mf4h gradio Server-Side Request Forgery vulnerability |
Medium EPSS 0.42% |
< 4.18.0 | 4.18.0 |
| GHSA-3x9g-xfj5-fq84 Duplicate Advisory: Cross-Site Request Forgery in Gradio Withdrawn |
Medium | < 4.19.2 | 4.19.2 |
| GHSA-48cq-79qq-6f7x Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files |
Medium EPSS 0.35% |
< 4.19.2 | 4.19.2 |
| GHSA-48cq-79qq-6f7x Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files |
Medium EPSS 0.35% |
< 4.19.2 | 4.19.2 |
| GHSA-hmx6-r76c-85g9 Gradio apps vulnerable to timing attacks to guess password |
Medium EPSS 0.50% |
< 4.19.2 | 4.19.2 |
| GHSA-hmx6-r76c-85g9 Gradio apps vulnerable to timing attacks to guess password |
Medium EPSS 0.50% |
< 4.19.2 | 4.19.2 |
| GHSA-f3h9-8phc-6gvh Gradio Path Traversal vulnerability |
Critical EPSS 0.96% |
< 4.9.0 | 4.9.0 |
| GHSA-f3h9-8phc-6gvh Gradio Path Traversal vulnerability |
Critical EPSS 0.96% |
No fix yet | |
| GHSA-6qm2-wpxq-7qh2 Gradio makes the `/file` secure against file traversal and server-side request forgery attacks |
High EPSS 28.34% |
< 4.11.0 | 4.11.0 |
| GHSA-6qm2-wpxq-7qh2 Gradio makes the `/file` secure against file traversal and server-side request forgery attacks |
High EPSS 28.34% |
< 4.11.0 | 4.11.0 |
| GHSA-gqvf-3hgp-5hxv Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
High EPSS 1.68% |
< 4.14.0 | 4.14.0 |
| GHSA-gqvf-3hgp-5hxv Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability |
High EPSS 1.68% |
< 4.14.0 | 4.14.0 |
| GHSA-v4q9-qgqf-7jwp Gradio arbitrary file upload vulnerability |
Medium EPSS 0.41% |
<= 3.27.0 | No fix yet |
| GHSA-v4q9-qgqf-7jwp Gradio arbitrary file upload vulnerability |
Medium EPSS 0.41% |
<= 3.27.0 | No fix yet |
| GHSA-3qqg-pgqq-3695 Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs |
High EPSS 0.65% |
< 3.34.0 | 3.34.0 |
| GHSA-3qqg-pgqq-3695 Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs |
High EPSS 0.65% |
< 3.34.0 | 3.34.0 |
| GHSA-3x5j-9vwr-8rr5 Update share links to use FRP instead of SSH tunneling |
Medium EPSS 0.55% |
< 3.13.1 | 3.13.1 |
| GHSA-3x5j-9vwr-8rr5 Update share links to use FRP instead of SSH tunneling |
Medium EPSS 0.55% |
< 3.13.1 | 3.13.1 |
| GHSA-f8xq-q7px-wg8c Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging |
High EPSS 1.30% |
< 2.8.11 | 2.8.11 |
| GHSA-f8xq-q7px-wg8c Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging |
High EPSS 1.30% |
< 2.8.11 | 2.8.11 |
| GHSA-rhq2-3vr9-6mcr Files on the host computer can be accessed from the Gradio interface |
High EPSS 3.85% |
< 2.5.0 | 2.5.0 |
| GHSA-rhq2-3vr9-6mcr Files on the host computer can be accessed from the Gradio interface |
High EPSS 3.85% |
< 2.5.0 | 2.5.0 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor