Gradio Project Gradio

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself.

Gradio contains Use of Hard-coded Credentials

SSRF in the path parameter of /queue/join in Gradio

Command Injection in gradio-app/gradio

LFI in Gradio

Command Injection in gradio-app/gradio

Unfiltered paths in gradio

Insecure communication between the FRP client and server in Gradio

Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging

Gradio Blocked Path ACL Bypass Vulnerability

Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()

Server-Side Request Forgery (SSRF) in gradio-app/gradio

Command Injection in gradio-app/gradio via deploy+test-visual.yml workflow

Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing

CORS origin validation is not performed when the request has a cookie in Gradio

Path Traversal in gradio-app/gradio

Race condition in update_root_in_config may redirect user traffic in Gradio

Files on the host computer can be accessed from the Gradio interface

Gradio < 6.15.0 Cookie Injection via Shared Proxy Client

Local File Inclusion in gradio-app/gradio

Make the `/file` secure against file traversal attacks

Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio

Gradio has Absolute Path Traversal on Windows with Python 3.13+

Regular Expression Denial of Service (ReDoS) in gradio-app/gradio

Local File Inclusion in JSON component in gradio-app/gradio

Several components’ post-process steps may allow arbitrary file leaks in Gradio

Denial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradio

Gradio Allows Unauthorized File Copy via Path Manipulation

Zip Bomb Vulnerability in gradio-app/gradio

Gradio before 4.20 allows credential leakage on Windows.

Lack of integrity check on the downloaded FRP client in Gradio

SSRF Vulnerability in gradio-app/gradio

Secrets Exfiltration in gradio-app/gradio

CORS origin validation accepts the null origin in Gradio

Cross-site Scripting on Gradio server via upload of HTML files, JS files, or SVG files

SSRF Vulnerability in gradio-app/gradio

The `is_in_or_equal` function may be bypassed in Gradio

Arbitrary file read with File and UploadButton components in Gradio

In gradio <=4.42.0, the gr.DownloadButton function has a hidden server-side request forgery (SSRF) vulnerability. The reason is that within the save_url_to_cache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resources and sensitive information.

Open Redirect in gradio-app/gradio