MEDIUM6.5
PYSEC-2026-1407
Gradio's Component Server does not properly consider` _is_server_fn` for functions
Quick fix
PYSEC-2026-1407 — gradio: upgrade to the fixed version with the command below.
pip install --upgrade 'gradio>=4.13.0'Details
Component Server in Gradio before 4.13 does not properly consider` _is_server_fn` for functions.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-34511[ADVISORY]
- https://github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2[FIX]
- https://github.com/gradio-app/gradio[PACKAGE]
- https://www.gradio.app/changelog#4-13-0[WEB]
- https://pypi.org/project/gradio[PACKAGE]
- https://github.com/advisories/GHSA-34rf-p3r3-58x2[ADVISORY]