py-gradio
Python library for easily interacting with trained machine learning models
Security Advisories for py-gradio in spack
Repackage
Repackage
Repackage
Repackage
High
over 1 year ago
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
pypi
gradio
Repackage
Repackage
Repackage
Repackage
Moderate
almost 2 years ago
Gradio vulnerable to arbitrary file read with File and UploadButton components
pypi
gradio
Repackage
Low
almost 2 years ago
Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list
pypi
gradio
Repackage
Moderate
almost 2 years ago
Gradio has an XSS on every Gradio server via upload of HTML files, JS files, or SVG files
pypi
gradio
Repackage
High
almost 2 years ago
Gradio uses insecure communication between the FRP client and server
pypi
gradio
Repackage
High
almost 2 years ago
Gradio has a race condition in update_root_in_config may redirect user traffic
pypi
gradio
Repackage
Moderate
almost 2 years ago
Gradio performs a non-constant-time comparison when comparing hashes
pypi
gradio
Repackage
Moderate
almost 2 years ago
Gradio has several components with post-process steps allow arbitrary file leaks
pypi
gradio
Repackage
Repackage
Low
almost 2 years ago
In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring
pypi
gradio
Repackage
Moderate
almost 2 years ago
Gradio vulnerable to SSRF in the path parameter of /queue/join
pypi
gradio
Repackage
Moderate
almost 2 years ago
Gradio has a one-level read path traversal in `/custom_component`
pypi
gradio
Repackage
Repackage
Repackage
High
almost 2 years ago
Gradios's CORS origin validation is not performed when the request has a cookie
pypi
gradio
Repackage
Repackage
Repackage
Repackage
Moderate
over 2 years ago
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
pypi
gradio
Repackage
Repackage
Moderate
over 2 years ago
Gradio's Component Server does not properly consider` _is_server_fn` for functions
pypi
gradio
Repackage
Repackage
Repackage
Repackage
Repackage
Repackage
High
over 2 years ago
Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
pypi
gradio
Repackage
Critical
over 2 years ago
Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
pypi
gradio
Repackage
Moderate
about 3 years ago
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
pypi
gradio
Repackage
Repackage
High
over 4 years ago
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
pypi
gradio
Repackage
Critical
over 4 years ago
Files on the host computer can be accessed from the Gradio interface
pypi
gradio