Lucene search

GoogleOSV:GHSA-34RF-P3R3-58X2

HistoryMay 05, 2024 - 9:30 p.m.

Gradio's Component Server does not properly consider` _is_server_fn` for functions

2024-05-0521:30:31

Google

osv.dev

gradio

component server

security vulnerability

functions

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

Component Server in Gradio before 4.13 does not properly consider _is_server_fn for functions.

CPENameOperatorVersion
gradioeq3.0b5
gradioeq2.6.4b0
gradioeq3.1.4b4
gradioeq1.4.4
gradioeq3.12.0b7
gradioeq3.13.1b2
gradioeq3.23.0
gradioeq2.3.4
gradioeq2.3.0a0
gradioeq2.7.0a102

Name	Operator	Version
gradio	eq	3.0b5
gradio	eq	2.6.4b0
gradio	eq	3.1.4b4
gradio	eq	1.4.4
gradio	eq	3.12.0b7
gradio	eq	3.13.1b2
gradio	eq	3.23.0
gradio	eq	2.3.4
gradio	eq	2.3.0a0
gradio	eq	2.7.0a102

Rows per page:

1-10 of 5081

References

github.com/gradio-app/gradio

github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2

nvd.nist.gov/vuln/detail/CVE-2024-34511

www.gradio.app/changelog#4-13-0