Gradio: Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks
Affects: Gradio
Gradio vulnerabilities
- Product
- Gradio
- Vendor
- Gradio
- Kind
- Machine learning app framework
Securaity has published 3 advisories for Gradio: 1 High, 1 Medium, 1 Low.
Gradio is a machine learning app framework made and maintained by Gradio. It is a code library that developers use to turn a model or a data script into a simple web app that other people can open and use in a browser. The people who usually install and run it are developers and data scientists who want to share a model or a data tool as a web app. The apps built with Gradio run wherever the developer hosts them, so the place a given app lives depends on the person who set it up.
Advisories
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Affects: Gradio
Gradio: Gradio contains a cookie injection vulnerability
Affects: Gradio