Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-6572 · ADVISORY
• gradio-app/gradio commit 5b5af18 · WEB
• gradio-app/gradio · PACKAGE
• pypa/advisory-database · WEB
• huntr.com/bounties/21d2ff0c-d43a-4afd-bb4d-049ee8da5b5c · WEB
• GitHub Advisory GHSA-gqvf-3hgp-5hxv · ADVISORY

gradio 的其他漏洞

• CVE-2026-49119高危 7.5Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated …
• CVE-2026-10783低危 2.5A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache …
• CVE-2026-48545中危 6.8Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation …
• CVE-2026-28416高危 8.6Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side Request Forgery (SSRF) vulnera…
• CVE-2026-28415中危 4.7Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_to_target() function in Gradio…