CVE-2024-47870

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a race condition in the updaterootinconfig function, allowing an attacker to modify the root URL used by the Gradio frontend to communicate with the backend. By exploiting this flaw, an attacker ca...

SUSE CVE-2024-47870

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a race condition in the updaterootinconfig function, allowing an attacker to modify the root URL used by the Gradio frontend to communicate with the backend. By exploiting this flaw, an attacker ca...

CVE-2024-47870

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a race condition in the updaterootinconfig function, allowing an attacker to modify the root URL used by the Gradio frontend to communicate with the backend. By exploiting this flaw, an attacker ca...

gradio-notebook (>=0.0.5, <=0.0.15), llava-torch (>=1.2.1.post4, <=1.2.2.post1) +3 more potentially affected by CVE-2024-47870 via gradio (4.16.0)

gradio PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-notebook =0.0.5, =1.2.1.post4, =0.1.0, =0.0.1, =1.2.2.post1, =4.4.0 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

cleanunet-denoiser (>=0.0.1.dev1, <=0.0.1.dev3), depthflow (>=0.7.0.dev1, <=0.8.0) +4 more potentially affected by CVE-2024-47870 via gradio (4.44.0)

gradio PYPI version 4.44.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cleanunet-denoiser =0.0.1.dev1, =0.7.0.dev1, =0.4.5, =0.5.9, =1.0.2, =1.0.8 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

moviechat (0.1.0) potentially affected by CVE-2024-47870 via gradio (3.24.1)

gradio PYPI version 3.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - moviechat 0.1.0 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

rexia-ai (>=0.3.3, <=0.3.5.5) potentially affected by CVE-2024-47870 via gradio (4.39.0)

gradio PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - rexia-ai =0.3.3, =0.3.5.5 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

infervcpy (>=0.1.0, <=1.6.0), lisa-on-cuda (1.4.1) +3 more potentially affected by CVE-2024-47870 via gradio (4.40.0)

gradio PYPI version 4.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - infervcpy =0.1.0, =0.0.12, =1.0.0a30, =1.0.0, =1.0.1 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-47870 via gradio (3.48.0)

gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

allmetal3d (>=0.4.0, <=0.7.3) potentially affected by CVE-2024-47870 via gradio (4.20.0)

gradio PYPI version 4.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - allmetal3d =0.4.0, =0.7.3 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-47870 via gradio (3.36.1)

gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

autobiasdetector (0.0.2), chat-with-mlx (>=0.2.0, <=0.2.2) +6 more potentially affected by CVE-2024-47870 via gradio (4.29.0)

gradio PYPI version 4.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - autobiasdetector 0.0.2 - chat-with-mlx =0.2.0, =0.1.1, =0.0.1, =0.0.1, =1.3.0, =1.4.3 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-2...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-47870 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-47870 Source advisory:...

whisperplus (>=0.0.6, <=0.2.3) potentially affected by CVE-2024-47870 via gradio (4.7.1)

gradio PYPI version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - whisperplus =0.0.6, =0.2.3 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2024-47870 via gradio (3.43.2)

gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

matanyone2-runtime (>=0.1.0, <=0.2.0) potentially affected by CVE-2024-47870 via gradio (4.31.0)

gradio PYPI version 4.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - matanyone2-runtime =0.1.0, =0.2.0 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

langs-vall (>=0.0.1, <=0.0.18) potentially affected by CVE-2024-47870 via gradio (3.47.1)

gradio PYPI version 3.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - langs-vall =0.0.1, =0.0.18 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

gcvit (>=1.0.4, <=1.0.9) potentially affected by CVE-2024-47870 via gradio (3.1.0)

gradio PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gcvit =1.0.4, =1.0.9 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

explainitall (>=1.0.0, <=1.0.2) potentially affected by CVE-2024-47870 via gradio (4.4.1)

gradio PYPI version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - explainitall =1.0.0, =1.0.2 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-47870 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-47870 Source advisory: OSV:PYSEC-2024-218...