6 matches found
CVE-2024-10624
A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...
aiconfigurator (>=0.1.0 <=0.2.0), alphai (>=0.0.4 <=0.0.7) +172 more potentially affected by CVE-2024-10624 via gradio (>=4.38.1 <=4.8.0)
gradio PYPI version =4.38.1, =0.1.0, =0.0.4, =0.1.0, =25.3.1, =0.0.1, =0.1.0, =0.1.0, =0.1.1, =0.1.0a20, =1.1.1, =25.3.1, =0.0.1.dev1, =0.2.11, =0.2.25 and more Source cves: CVE-2024-10624 Source advisory: OSV:GHSA-RVGH-PR46-X7GG...
CVE-2024-10624
A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...
CVE-2024-10624 Regular Expression Denial of Service (ReDoS) in gradio-app/gradio
A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...
CVE-2024-10624 Regular Expression Denial of Service (ReDoS) in gradio-app/gradio
A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...
CVE-2024-10624
CVE-2024-10624 affects the gradio-app/gradio repository, vulnerable in the gr.Datetime component due to a vulnerable regex: ^(?:\snow\s (?:-\s*(\d+)\s*([dmhs]))?)?\s*$ that can cause polynomial-time matching in Python’s regex engine. The affected commit is 98cbcae. An attacker can trigger a DoS b...