PyPI/gradio CVE-2024-47168: medium 4.3, EPSS 0.33%

In Gradio, the `enable_monitoring` flag set to `False` does not disable monitoring

Action: Upgrade gradio to 4.44.0 or later.

pip install gradio==4.44.0

Affected

Fixed versions

Sources

• osv: GHSA-hm3c-93pg-4cxw
• https://github.com/gradio-app/gradio/security/advisories/GHSA-hm3c-93pg-4cxw
• https://nvd.nist.gov/vuln/detail/CVE-2024-47168
• https://github.com/gradio-app/gradio
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2024-198.yaml

CVE-2024-47168 · published 2024-10-10T22:02:30Z · modified 2025-01-21T18:21:53.376541Z · JSON