Lucene search

GitHub Advisory DatabaseGHSA-34RF-P3R3-58X2

HistoryMay 05, 2024 - 9:30 p.m.

Gradio's Component Server does not properly consider` _is_server_fn` for functions

2024-05-0521:30:31

GitHub Advisory Database

github.com

gradio

component server

vulnerability

software

function restriction

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Component Server in Gradio before 4.13 does not properly consider _is_server_fn for functions.

Affected configurations

Vulners

Node

gradio-appgradioRange<4.13.0

CPENameOperatorVersion
gradiolt4.13.0

CPE	Name	Operator	Version
	gradio	lt	4.13.0

github.com/advisories/GHSA-34rf-p3r3-58x2

github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2

nvd.nist.gov/vuln/detail/CVE-2024-34511

www.gradio.app/changelog#4-13-0