homeassistant-stubs (2023.2.0b9), pytest-homeassistant-custom-component (0.12.51) potentially affected by CVE-2025-65713 via homeassistant (2023.2.0b9)

homeassistant PYPI version 2023.2.0b9 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.2.0b9 - pytest-homeassistant-custom-component 0.12.51 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.12.6), pytest-homeassistant-custom-component (0.12.34) potentially affected by CVE-2025-65713 via homeassistant (2022.12.6)

homeassistant PYPI version 2022.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.6 - pytest-homeassistant-custom-component 0.12.34 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.8.3), pytest-homeassistant-custom-component (0.11.8) potentially affected by CVE-2025-65713 via homeassistant (2022.8.3)

homeassistant PYPI version 2022.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.3 - pytest-homeassistant-custom-component 0.11.8 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.10.1), pytest-homeassistant-custom-component (0.12.6) potentially affected by CVE-2025-65713 via homeassistant (2022.10.1)

homeassistant PYPI version 2022.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.1 - pytest-homeassistant-custom-component 0.12.6 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.12.0b0), pytest-homeassistant-custom-component (0.12.22) potentially affected by CVE-2025-65713 via homeassistant (2022.12.0b0)

homeassistant PYPI version 2022.12.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.0b0 - pytest-homeassistant-custom-component 0.12.22 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.7.3), pytest-homeassistant-custom-component (0.10.4) potentially affected by CVE-2025-65713 via homeassistant (2022.7.3)

homeassistant PYPI version 2022.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.3 - pytest-homeassistant-custom-component 0.10.4 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2023.3.0), pytest-homeassistant-custom-component (0.13.4) potentially affected by CVE-2025-65713 via homeassistant (2023.3.0)

homeassistant PYPI version 2023.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0 - pytest-homeassistant-custom-component 0.13.4 Source cves: CVE-2025-65713 Source advisory:...

pytest-homeassistant-custom-component (0.5.7) potentially affected by CVE-2025-65713 via homeassistant (2021.12.3)

homeassistant PYPI version 2021.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - pytest-homeassistant-custom-component 0.5.7 Source cves: CVE-2025-65713 Source advisory: OSV:GHSA-PP3G-XMM4-5CW9...

homeassistant-stubs (2023.11.1), pytest-homeassistant-custom-component (0.13.75) potentially affected by CVE-2025-65713 via homeassistant (2023.11.1)

homeassistant PYPI version 2023.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.11.1 - pytest-homeassistant-custom-component 0.13.75 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2023.1.0b4), pytest-homeassistant-custom-component (0.12.40) potentially affected by CVE-2025-65713 via homeassistant (2023.1.0b4)

homeassistant PYPI version 2023.1.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.0b4 - pytest-homeassistant-custom-component 0.12.40 Source cves: CVE-2025-65713 Source advisory:...

Directory Traversal

Gradio is vulnerable to Directory Traversal. The vulnerability is due to improper file path handling in the /customcomponent endpoint, allowing attackers to access source code from custom components by manipulating the file path...

SUSE CVE-2024-47166

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the /customcomponent endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the...

PYSEC-2024-197

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the /customcomponent endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the...

CVE-2024-47166 One-level read path traversal in `/custom_component` in Gradio

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the /customcomponent endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the...

CVE-2024-47166 One-level read path traversal in `/custom_component` in Gradio

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a one-level read path traversal in the /customcomponent endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the...

Directory Traversal

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Directory Traversal via the /customcomponent endpoint. An attacker can access and leak source code from custom components by manipulating the file pa...

PT-2024-32449 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 4.44 Description: This issue involves a one-level read path traversal in the "/custom component" endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating t...

PYSEC-2024-177

Langflow through 0.6.19 allows remote code execution if untrusted users are able to reach the "POST /api/v1/customcomponent" endpoint and provide a Python script...

Langflow Security Vulnerabilities

Langflow is a visualization framework for building multi-agent and RAG applications from the Langflow open source. A security vulnerability exists in Langflow version 0.6.19 that originates if an untrusted user can reach the POST /api/v1/customcomponent endpoint and provide a Python script, then...

PT-2024-27242 · Langflow · Langflow

Name of the Vulnerable Software and Affected Versions: Langflow versions 0.6.19 and earlier Description: The issue allows remote code execution if untrusted users can reach the "POST /api/v1/custom component" endpoint and provide a Python script. Recommendations: For Langflow versions 0.6.19 and...