SUSE CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

artcraft (>=0.0.0, <=0.0.23), maestror (0.1.0) potentially affected by CVE-2024-34510 via gradio (3.41.2)

gradio PYPI version 3.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - artcraft =0.0.0, =0.0.23 - maestror 0.1.0 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

llmtuner (0.2.0), prompt2model (>=0.0.0a0, <=0.1.0) potentially affected by CVE-2024-34510 via gradio (3.38.0)

gradio PYPI version 3.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - llmtuner 0.2.0 - prompt2model =0.0.0a0, =0.1.0 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

oobabot-plugin (0.2.3) potentially affected by CVE-2024-34510 via gradio (3.33.1)

gradio PYPI version 3.33.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - oobabot-plugin 0.2.3 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

picsimsearch (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-34510 via gradio (3.40.1)

gradio PYPI version 3.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - picsimsearch =0.1.0, =0.1.2 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

yolov2keras (>=0.0.2, <=0.0.6) potentially affected by CVE-2024-34510 via gradio (3.45.2)

gradio PYPI version 3.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - yolov2keras =0.0.2, =0.0.6 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-34510 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-34510 Source advisory:...

agentx (>=0.0.17, <=0.0.27), askdoc (0.1.1) +20 more potentially affected by CVE-2024-34510 via gradio (>=4.0.0b15, <=4.19.2)

gradio PYPI version =4.0.0b15, =0.0.17, =0.1.0, =0.1.2, =1.0.0, =0.0.5, =1.2.1.post4, =0.0.0.1, =0.0.1, =0.0.41 and more Source cves: CVE-2024-34510 Source advisory: GHSA-RVFH-H6C7-FC3C...

draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-34510 via gradio (3.34.0)

gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-34510 Source advisory:...

chatarena (>=0.1.9, <=0.1.10) potentially affected by CVE-2024-34510 via gradio (3.20.0)

gradio PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - chatarena =0.1.9, =0.1.10 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-34510 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

moviechat (0.1.0) potentially affected by CVE-2024-34510 via gradio (3.24.1)

gradio PYPI version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - moviechat 0.1.0 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

querytograph (>=0.0.1, <=0.0.5), tumourkit (>=0.6.0, <=0.10.1) potentially affected by CVE-2024-34510 via gradio (3.26.0)

gradio PYPI version 3.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - querytograph =0.0.1, =0.6.0, =0.10.1 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

anomalib-orobix (>=0.7.0.dev134, <=0.7.0.dev143), quadra (>=2.2.0, <=2.3.0a1) potentially affected by CVE-2024-34510 via gradio (3.0.2)

gradio PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - anomalib-orobix =0.7.0.dev134, =2.2.0, =2.3.0a1 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-34510 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-34510 via gradio (1.7.7)

gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-34510 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

go-chatgpt (0.0.5) potentially affected by CVE-2024-34510 via gradio (3.22.1)

gradio PYPI version 3.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.5 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

pynami (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-34510 via gradio (3.17.0)

gradio PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.1, =0.0.2 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...

diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2024-34510 via gradio (3.15.0)

gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2024-34510 Source advisory: OSV:GHSA-RVFH-H6C7-FC3C...