CVE-2024-47168

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves data exposure due to the enablemonitoring flag not properly disabling monitoring when set to False. Even when monitoring is supposedly disabled, an attacker or unauthorized user can still access th...

CVE-2024-47168

creationtimestamp| type| source ---|---|--- 2024-10-11 01:07:50+00:00| seen| https://t.me/cvedetector/7641...

draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-47168 via gradio (3.34.0)

gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

llmtuner (0.2.0), prompt2model (>=0.0.0a0, <=0.1.0) potentially affected by CVE-2024-47168 via gradio (3.38.0)

gradio PYPI version 3.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - llmtuner 0.2.0 - prompt2model =0.0.0a0, =0.1.0 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +54 more potentially affected by CVE-2024-47168 via gradio (>=4.0.0b15, <=4.43.0)

gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =25.3.1, =1.1.0, =0.1.0, =25.3.1, =0.1.2, =0.2.11, =25.3.4, =0.1.1, =0.5.0, =0.0.1, =0.0.2.post1 and more Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

autotrain-advanced (>=0.6.14, <=0.6.15.dev0), llama2-wrapper (>=0.1.0, <=0.1.14) potentially affected by CVE-2024-47168 via gradio (3.37.0)

gradio PYPI version 3.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.14, =0.1.0, =0.1.14 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-47168 via gradio (3.36.1)

gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2024-47168 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-47168 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-47168 Source advisory:...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-47168 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

artcraft (>=0.0.0, <=0.0.23), maestror (0.1.0) potentially affected by CVE-2024-47168 via gradio (3.41.2)

gradio PYPI version 3.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - artcraft =0.0.0, =0.0.23 - maestror 0.1.0 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-47168 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-47168 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

pynami (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-47168 via gradio (3.17.0)

gradio PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.1, =0.0.2 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2024-47168 via gradio (3.15.0)

gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

gcvit (>=1.0.4, <=1.0.9) potentially affected by CVE-2024-47168 via gradio (3.1.0)

gradio PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gcvit =1.0.4, =1.0.9 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

trubrics (>=1.1.0, <=1.1.1) potentially affected by CVE-2024-47168 via gradio (3.8.1)

gradio PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - trubrics =1.1.0, =1.1.1 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-47168 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-47168 Source advisory: OSV:PYSEC-2024-198...

pynami (>=0.0.3, <=0.0.5) potentially affected by CVE-2024-47168 via gradio (3.19.1)

gradio PYPI version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.3, =0.0.5 Source cves: CVE-2024-47168 Source advisory: OSV:GHSA-HM3C-93PG-4CXW...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2024-47168 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2024-47168 Source advisory: OSV:GHSA-HM3C-93PG-4CXW...