CVE-2024-4254

creationtimestamp| type| source ---|---|--- 2026-09-02 16:00:04+00:00| seen| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM 2026-09-03 00:00:41+00:00| published-proof-of-concept| Telegram/s3zjyT-FT6tCC8Ykb-K7GeZvSlBBM3ljM38r7xtE1exsPM...

CVE-2024-4254

The 'deploy-website.yml' workflow in the gradio-app/gradio repository, specifically in the 'main' branch, is vulnerable to secrets exfiltration due to improper authorization. The vulnerability arises from the workflow's explicit checkout and execution of code from a fork, which is unsafe as it...

CVE-2024-4254

CVE-2024-4254 — gradio-app/gradio : The main branch deploy-website.yml workflow is vulnerable to secrets exfiltration due to improper authorization. The workflow explicitly checks out and executes code from a fork, enabling untrusted code to run in an environment with push access to the base repo...