CVE-2024-47166

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the /customcomponent endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the...

CVE-2024-47166

creationtimestamp| type| source ---|---|--- 2024-10-11 01:07:57+00:00| seen| https://t.me/cvedetector/7647...

draggan (>=1.0.4, <=1.1.5) potentially affected by CVE-2024-47166 via gradio (3.28.1)

gradio PYPI version 3.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan =1.0.4, =1.1.5 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

torchflare (0.2.4) potentially affected by CVE-2024-47166 via gradio (2.2.13)

gradio PYPI version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - torchflare 0.2.4 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-47166 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

trubrics (>=1.1.0, <=1.1.1) potentially affected by CVE-2024-47166 via gradio (3.8.1)

gradio PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - trubrics =1.1.0, =1.1.1 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

chatarena (>=0.1.9, <=0.1.10) potentially affected by CVE-2024-47166 via gradio (3.20.0)

gradio PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - chatarena =0.1.9, =0.1.10 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

go-chatgpt (0.0.3), video-transformers (>=0.0.7, <=0.0.9) potentially affected by CVE-2024-47166 via gradio (3.20.1)

gradio PYPI version 3.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.3 - video-transformers =0.0.7, =0.0.9 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

moviechat (0.1.0) potentially affected by CVE-2024-47166 via gradio (3.24.1)

gradio PYPI version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - moviechat 0.1.0 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

llmtuner (0.2.0), prompt2model (>=0.0.0a0, <=0.1.0) potentially affected by CVE-2024-47166 via gradio (3.38.0)

gradio PYPI version 3.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - llmtuner 0.2.0 - prompt2model =0.0.0a0, =0.1.0 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

picsimsearch (>=0.1.0, <=0.1.2) potentially affected by CVE-2024-47166 via gradio (3.40.1)

gradio PYPI version 3.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - picsimsearch =0.1.0, =0.1.2 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-47166 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-47166 Source advisory:...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-47166 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

customintents (>=0.7.3, <=0.7.6) potentially affected by CVE-2024-47166 via gradio (3.16.1)

gradio PYPI version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.7.3, =0.7.6 Source cves: CVE-2024-47166 Source advisory: OSV:PYSEC-2024-197...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-47166 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-47166 Source advisory: OSV:GHSA-37QC-QGX6-9XJV...

gcvit (>=1.0.4, <=1.0.9) potentially affected by CVE-2024-47166 via gradio (3.1.0)

gradio PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gcvit =1.0.4, =1.0.9 Source cves: CVE-2024-47166 Source advisory: OSV:GHSA-37QC-QGX6-9XJV...

trubrics (>=1.1.0, <=1.1.1) potentially affected by CVE-2024-47166 via gradio (3.8.1)

gradio PYPI version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - trubrics =1.1.0, =1.1.1 Source cves: CVE-2024-47166 Source advisory: OSV:GHSA-37QC-QGX6-9XJV...

diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2024-47166 via gradio (3.15.0)

gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2024-47166 Source advisory: OSV:GHSA-37QC-QGX6-9XJV...

customintents (>=0.7.3, <=0.7.6) potentially affected by CVE-2024-47166 via gradio (3.16.1)

gradio PYPI version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.7.3, =0.7.6 Source cves: CVE-2024-47166 Source advisory: OSV:GHSA-37QC-QGX6-9XJV...

pynami (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-47166 via gradio (3.17.0)

gradio PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.1, =0.0.2 Source cves: CVE-2024-47166 Source advisory: OSV:GHSA-37QC-QGX6-9XJV...