Gradio allows credential leakage on Windows

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-34510 · ADVISORY
• gradio-app/gradio · PACKAGE
• pypa/advisory-database · WEB
• gradio.app/changelog · WEB
• gradio-app/gradio · Product
• GitHub Advisory GHSA-rvfh-h6c7-fc3c · ADVISORY

Autres vulnérabilités de gradio

• CVE-2026-49119ÉLEVÉE 7.5Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated …
• CVE-2026-10783FAIBLE 2.5A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache …
• CVE-2026-48545MOYENNE 6.8Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation …
• CVE-2026-28416ÉLEVÉE 8.6Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnera…
• CVE-2026-28415MOYENNE 4.7Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio…