PT-2025-12047

Name of the Vulnerable Software and Affected Versions gradio-app/gradio version git 98cbcae Description A vulnerability in the dataframe component of gradio-app/gradio allows for a zip bomb attack. The component uses pd.read csv to process input values, which can accept compressed files. An...