Skip to content
Submit incident
Organization/organizations/gradio

Gradio

9
Records
2024 to 2025
Years covered
1
Category

Incidents by year

2024
7
2025
2

Incident records9

May 2025Gradio allows unauthorized file copy via path manipulationConfirmedSecurity and cyberattacksgithub.comcve.orgJan 2025Gradio file path access control can be bypassed on case-insensitive filesystemsConfirmedSecurity and cyberattacksgithub.comcve.orgOct 2024SSRF vulnerability in Gradio gr.DownloadButtonReportedSecurity and cyberattacksgist.github.comrumbling-slice-eb0.notion.siteOct 2024CORS origin validation bypassed in Gradio with cookies (CVE-2024-47084)ConfirmedSecurity and cyberattacksgithub.comcve.orgOct 2024One-level read path traversal in `/custom_component` in Gradio (CVE-2024-47166)ConfirmedSecurity and cyberattacksgithub.comcve.orgOct 2024SSRF vulnerability in Gradio /queue/join endpoint (CVE-2024-47167)ConfirmedSecurity and cyberattacksgithub.comcve.orgOct 2024Gradio enable_monitoring flag fails to disable monitoring (CVE-2024-47168)ConfirmedSecurity and cyberattacksgithub.comOct 2024Gradio FRP client download lacks integrity verificationConfirmedSecurity and cyberattacksgithub.comcve.orgOct 2024Insecure FRP communication in Gradio share=True modeConfirmedSecurity and cyberattacksgithub.comcve.org