CVE-2023-6572

Command Injection in GitHub repository gradio-app/gradio prior to main...

artcraft (>=0.0.0, <=0.0.23), maestror (0.1.0) potentially affected by CVE-2023-6572 via gradio (3.41.2)

gradio PYPI version 3.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - artcraft =0.0.0, =0.0.23 - maestror 0.1.0 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

llmtuner (0.2.0), prompt2model (>=0.0.0a0, <=0.1.0) potentially affected by CVE-2023-6572 via gradio (3.38.0)

gradio PYPI version 3.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - llmtuner 0.2.0 - prompt2model =0.0.0a0, =0.1.0 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2023-6572 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

yolov2keras (>=0.0.2, <=0.0.6) potentially affected by CVE-2023-6572 via gradio (3.45.2)

gradio PYPI version 3.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - yolov2keras =0.0.2, =0.0.6 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2023-6572 via gradio (3.43.2)

gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5...

autotrain-advanced (>=0.6.14, <=0.6.15.dev0), llama2-wrapper (>=0.1.0, <=0.1.14) potentially affected by CVE-2023-6572 via gradio (3.37.0)

gradio PYPI version 3.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autotrain-advanced =0.6.14, =0.1.0, =0.1.14 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

picsimsearch (>=0.1.0, <=0.1.2) potentially affected by CVE-2023-6572 via gradio (3.40.1)

gradio PYPI version 3.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - picsimsearch =0.1.0, =0.1.2 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

moviechat (0.1.0) potentially affected by CVE-2023-6572 via gradio (3.24.1)

gradio PYPI version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - moviechat 0.1.0 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

llmchatbot (>=1.0.3, <=1.0.4) potentially affected by CVE-2023-6572 via gradio (3.27.0)

gradio PYPI version 3.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - llmchatbot =1.0.3, =1.0.4 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

draggan (>=1.0.4, <=1.1.5) potentially affected by CVE-2023-6572 via gradio (3.28.1)

gradio PYPI version 3.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan =1.0.4, =1.1.5 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

oobabot-plugin (0.2.3) potentially affected by CVE-2023-6572 via gradio (3.33.1)

gradio PYPI version 3.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - oobabot-plugin 0.2.3 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2023-6572 via gradio (1.7.7)

gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

alignmap (1.0.0) potentially affected by CVE-2023-6572 via gradio (3.43.1)

gradio PYPI version 3.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - alignmap 1.0.0 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2023-6572 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2023-6572 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2023-6572 via gradio (3.15.0)

gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

torchflare (0.2.4) potentially affected by CVE-2023-6572 via gradio (2.2.13)

gradio PYPI version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - torchflare 0.2.4 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

trubrics (>=1.1.0, <=1.1.1) potentially affected by CVE-2023-6572 via gradio (3.8.1)

gradio PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - trubrics =1.1.0, =1.1.1 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5HXV...

draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2023-6572 via gradio (3.34.0)

gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2023-6572 Source advisory: OSV:GHSA-GQVF-3HGP-5...