CVE-2024-10569

A vulnerability in the dataframe component of gradio-app/gradio version git 98cbcae allows for a zip bomb attack. The component uses pd.readcsv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server...

Gradio 资源管理错误漏洞

Gradio, an open source Python library from Gradio Open Source, is a method for demonstrating machine learning models through a friendly web interface. A resource management error vulnerability exists in Gradio version 98cbcae, which stems from a regular expression used by the gr.Datetime componen...

PT-2025-12047

Name of the Vulnerable Software and Affected Versions gradio-app/gradio version git 98cbcae Description A vulnerability in the dataframe component of gradio-app/gradio allows for a zip bomb attack. The component uses pd.read csv to process input values, which can accept compressed files. An...

PT-2025-12050

Name of the Vulnerable Software and Affected Versions gradio-app/gradio version git 98cbcae Description A path traversal issue exists in the Gradio Audio component, allowing an attacker to control the format of the audio file. This can lead to arbitrary file content deletion by manipulating the...

Gradio 安全漏洞

Gradio, an open source Python library from Gradio Open Source, is a method for demonstrating machine learning models through a friendly web interface. A security vulnerability exists in version 98cbcae of Gradio, which stems from the improper handling of compressed files by the dataframe componen...

Gradio 安全漏洞

Gradio is an open source Python library from Gradio Open Source, a method for demonstrating machine learning models through a friendly web interface. A security vulnerability exists in Gradio version 98cbcae, which stems from a path traversal vulnerability in the Gradio Audio component, which...