VDB
KO
CRITICAL 9.4

PYSEC-2024-261

Details

A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / gradio

No fixed version published yet for gradio (pip). Pin to a known-safe version or switch to an alternative.

References