langs-vall (>=0.0.1, <=0.0.18) potentially affected by CVE-2024-4940 via gradio (3.47.1)

gradio PYPI version 3.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - langs-vall =0.0.1, =0.0.18 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

alignmap (1.0.0) potentially affected by CVE-2024-4940 via gradio (3.43.1)

gradio PYPI version 3.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - alignmap 1.0.0 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

harmonai-tools (>=0.0.6, <=0.0.7), stable-audio-tools (>=0.0.7, <=0.0.10) potentially affected by CVE-2024-4940 via gradio (3.42.0)

gradio PYPI version 3.42.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - harmonai-tools =0.0.6, =0.0.7, =0.0.10 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

fastmonai (>=0.3.6, <=0.8.3), melotts-krqnf (0.1.2) +3 more potentially affected by CVE-2024-4940 via gradio (3.36.1)

gradio PYPI version 3.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - fastmonai =0.3.6, =2.1.0, =0.0.4, =0.0.5 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-4940 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

go-chatgpt (0.0.5) potentially affected by CVE-2024-4940 via gradio (3.22.1)

gradio PYPI version 3.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - go-chatgpt 0.0.5 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-4940 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

torchflare (0.2.4) potentially affected by CVE-2024-4940 via gradio (2.2.13)

gradio PYPI version 2.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - torchflare 0.2.4 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

pynami (>=0.0.3, <=0.0.5) potentially affected by CVE-2024-4940 via gradio (3.19.1)

gradio PYPI version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.3, =0.0.5 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

pynami (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-4940 via gradio (3.17.0)

gradio PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.1, =0.0.2 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

customintents (>=0.8.0, <=1.0.0) potentially affected by CVE-2024-4940 via gradio (3.16.2)

gradio PYPI version 3.16.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.8.0, =1.0.0 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-4940 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-4940 Source advisory:...

africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +43 more potentially affected by CVE-2024-4940 via gradio (>=4.0.0b15, <=4.33.0)

gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =0.1.0, =0.1.2, =0.1.1, =0.5.0, =0.0.1, =1.0.0, =0.0.5, =0.0.15 and more Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

cosyvoice-package (0.0.2), matcha-tts (>=0.0.7.1, <=0.0.7.2) +1 more potentially affected by CVE-2024-4940 via gradio (3.43.2)

gradio PYPI version 3.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cosyvoice-package 0.0.2 - matcha-tts =0.0.7.1, =0.0.7.2 - matcha-tts-package 0.0.1 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

draggan (>=1.0.4, <=1.1.5) potentially affected by CVE-2024-4940 via gradio (3.28.1)

gradio PYPI version 3.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan =1.0.4, =1.1.5 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-4940 via gradio (1.7.7)

gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

chatarena (>=0.1.9, <=0.1.10) potentially affected by CVE-2024-4940 via gradio (3.20.0)

gradio PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - chatarena =0.1.9, =0.1.10 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-4940 via gradio (3.34.0)

gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-4940 Source advisory: OSV:PYSEC-2026-1414...

africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +43 more potentially affected by CVE-2024-4940 via gradio (>=4.0.0b15, <=4.33.0)

gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =0.1.0, =0.1.2, =0.1.1, =0.5.0, =0.0.1, =1.0.0, =0.0.5, =0.0.15 and more Source cves: CVE-2024-4940 Source advisory: OSV:GHSA-G6C9-F4XM-9J4X...

llmtuner (0.2.0), prompt2model (>=0.0.0a0, <=0.1.0) potentially affected by CVE-2024-4940 via gradio (3.38.0)

gradio PYPI version 3.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - llmtuner 0.2.0 - prompt2model =0.0.0a0, =0.1.0 Source cves: CVE-2024-4940 Source advisory: OSV:GHSA-G6C9-F4XM-9J4X...