CVE-2024-47165

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to CORS origin validation accepting a null origin. When a Gradio server is deployed locally, the localhostaliases variable includes "null" as a valid origin. This allows attackers to make unauthoriz...

wm-topicgpt (>=0.1.1, <=0.1.5) potentially affected by CVE-2024-47165 via gradio (4.28.3)

gradio PYPI version 4.28.3 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - wm-topicgpt =0.1.1, =0.1.5 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

matanyone2-runtime (>=0.1.0, <=0.2.0) potentially affected by CVE-2024-47165 via gradio (4.31.0)

gradio PYPI version 4.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - matanyone2-runtime =0.1.0, =0.2.0 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

atelier-generator (>=25.3.1, <=25.3.4), citrailmu (>=25.3.1, <=25.3.8) +2 more potentially affected by CVE-2024-47165 via gradio (4.38.1)

gradio PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - atelier-generator =25.3.1, =25.3.1, =25.3.4, =25.3.1, =25.3.5 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

gryannote (>=0.3.1, <=0.3.3), scraibe-webui (0.1.0) potentially affected by CVE-2024-47165 via gradio (4.27.0)

gradio PYPI version 4.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gryannote =0.3.1, =0.3.3 - scraibe-webui 0.1.0 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

imaaage (>=0.0.1, <=0.0.5) potentially affected by CVE-2024-47165 via gradio (4.42.0)

gradio PYPI version 4.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - imaaage =0.0.1, =0.0.5 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

langs-vall (>=0.0.1, <=0.0.18) potentially affected by CVE-2024-47165 via gradio (3.47.1)

gradio PYPI version 3.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - langs-vall =0.0.1, =0.0.18 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2024-47165 via gradio (3.43.2)

gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

aiconfigurator (>=0.1.0, <=0.2.0), aijson-core (>=0.1.1, <=0.2.4) +155 more potentially affected by CVE-2024-47165 via gradio (4.44.1)

gradio PYPI version 4.44.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - aiconfigurator =0.1.0, =0.1.1, =0.1.1, =0.1.13, =0.1.1, =0.0.4, =0.1.0, =0.0.1, =0.1.0, =0.1.0a12, =0.1.1a1, =0.1.0a20, =0.1.0a37 and more Source...

artcraft (>=0.0.0, <=0.0.23), maestror (0.1.0) potentially affected by CVE-2024-47165 via gradio (3.41.2)

gradio PYPI version 3.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - artcraft =0.0.0, =0.0.23 - maestror 0.1.0 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

gradio-notebook (>=0.0.5, <=0.0.15), llava-torch (>=1.2.1.post4, <=1.2.2.post1) +3 more potentially affected by CVE-2024-47165 via gradio (4.16.0)

gradio PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-notebook =0.0.5, =1.2.1.post4, =0.1.0, =0.0.1, =1.2.2.post1, =4.4.0 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-47165 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-47165 Source advisory:...

my-minpy-pkg (>=0.0.0.1, <=0.0.0.2) potentially affected by CVE-2024-47165 via gradio (4.2.0)

gradio PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - my-minpy-pkg =0.0.0.1, =0.0.0.2 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

allmetal3d (>=0.4.0, <=0.7.3) potentially affected by CVE-2024-47165 via gradio (4.20.0)

gradio PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - allmetal3d =0.4.0, =0.7.3 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

whisperplus (>=0.0.6, <=0.2.3) potentially affected by CVE-2024-47165 via gradio (4.7.1)

gradio PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - whisperplus =0.0.6, =0.2.3 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-47165 via gradio (3.36.1)

gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

moviechat (0.1.0) potentially affected by CVE-2024-47165 via gradio (3.24.1)

gradio PYPI version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - moviechat 0.1.0 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

go-chatgpt (0.0.5) potentially affected by CVE-2024-47165 via gradio (3.22.1)

gradio PYPI version 3.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.5 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

aqueduct-llm (0.0.1), fschat (>=0.1.1, <=0.2.15) +3 more potentially affected by CVE-2024-47165 via gradio (3.23.0)

gradio PYPI version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - aqueduct-llm 0.0.1 - fschat =0.1.1, =0.0.1, =0.0.16 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-47165 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-47165 Source advisory: OSV:PYSEC-2024-214...