CVE-2024-8966

The CVE concerns a DoS in the file upload path of gradio-app/gradio, specifically @gradio/[email protected]. An attacker can append a large number of characters to the end of a multipart boundary, causing the server to process each character and generate warnings, which can render Gradio inaccessible ...