PyPI/gradio CVE-2024-47166: medium 5.3, EPSS 0.44%

Gradio has a one-level read path traversal in `/custom_component`

Action: Upgrade gradio to 4.44.0 or later.

pip install gradio==4.44.0

Affected

Fixed versions

Sources

• osv: GHSA-37qc-qgx6-9xjv
• https://github.com/gradio-app/gradio/security/advisories/GHSA-37qc-qgx6-9xjv
• https://nvd.nist.gov/vuln/detail/CVE-2024-47166
• https://github.com/gradio-app/gradio
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2024-197.yaml

CVE-2024-47166 · published 2024-10-10T21:36:43Z · modified 2025-01-21T18:19:28.009793Z · JSON