africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +209 more potentially affected by CVE-2024-10569 via gradio (>=4.2.0, <=4.44.1)

gradio PYPI version =4.2.0, =0.2.1, =0.0.6, =0.1.0, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.4.0, =0.0.4, =0.1.0, =25.3.1, =0.0.1, =0.1.1 and more Source cves: CVE-2024-10569 Source advisory: OSV:PYSEC-2026-1412...

CVE-2024-10569

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8254...

africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +209 more potentially affected by CVE-2024-10569 via gradio (>=4.2.0, <=4.44.1)

gradio PYPI version =4.2.0, =0.2.1, =0.0.6, =0.1.0, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.4.0, =0.0.4, =0.1.0, =25.3.1, =0.0.1, =0.1.1 and more Source cves: CVE-2024-10569 Source advisory: GHSA-7XMC-VHJP-QV5Q...

CVE-2024-10569

A vulnerability in the dataframe component of gradio-app/gradio version git 98cbcae allows for a zip bomb attack. The component uses pd.readcsv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server...