49 matches found
CVE-2026-48052 Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request
Papra is a minimalistic document management and archiving platform. Prior to version 26.5.0, an authenticated user who is a member of any organization can delete or rename tags belonging to a different organization, given the target tag's ID. The route handler verifies the caller's membership of...
africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +55 more potentially affected by CVE-2024-48052 via gradio (>=4.0.0b15, <=4.42.0)
gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =25.3.1, =0.1.0, =25.3.1, =0.1.2, =0.2.11, =25.3.4, =0.1.1, =0.5.0, =0.0.1, =0.0.3 and more Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-48052 via gradio (3.16.2)
gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
pynami (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-48052 via gradio (3.17.0)
gradio PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.1, =0.0.2 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
chatarena (>=0.1.9, <=0.1.10) potentially affected by CVE-2024-48052 via gradio (3.20.0)
gradio PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - chatarena =0.1.9, =0.1.10 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
torchflare (0.2.4) potentially affected by CVE-2024-48052 via gradio (2.2.13)
gradio PYPI version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - torchflare 0.2.4 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-48052 via gradio (1.7.7)
gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
customintents (>=0.7.3, <=0.7.6) potentially affected by CVE-2024-48052 via gradio (3.16.1)
gradio PYPI version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.7.3, =0.7.6 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2024-48052 via gradio (3.15.0)
gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
moviechat (0.1.0) potentially affected by CVE-2024-48052 via gradio (3.24.1)
gradio PYPI version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - moviechat 0.1.0 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-48052 via gradio (3.0.15)
gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-48052 via gradio (3.35.2)
gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
autotrain-advanced (>=0.6.32, <=0.7.63) potentially affected by CVE-2024-48052 via gradio (3.41.0)
gradio PYPI version 3.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.32, =0.7.63 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2024-48052 via gradio (3.43.2)
gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-48052 via gradio (3.50.2)
gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-48052 Source advisory:...
picsimsearch (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-48052 via gradio (3.40.1)
gradio PYPI version 3.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - picsimsearch =0.1.0, =0.1.2 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
EUVD-2025-48052
Malicious code in dono-gado-gado55-sukiwir npm...
OESA-2025-2356 python-httpie security update
HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs HTTP servers. The http https commands allow for creating and sendi...
OESA-2025-2358 python-httpie security update
HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs HTTP servers. The http https commands allow for creating and sendi...
