PyPI/gradio CVE-2024-34510: high 7.5, EPSS 0.67%

Gradio allows credential leakage on Windows

Action: Upgrade gradio to 4.20.0 or later.

pip install gradio==4.20.0

Affected

Fixed versions

Sources

• osv: GHSA-rvfh-h6c7-fc3c
• https://nvd.nist.gov/vuln/detail/CVE-2024-34510
• https://github.com/gradio-app/gradio
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2024-255.yaml
• https://www.gradio.app/changelog#4-20-0

CVE-2024-34510 · published 2024-05-05T21:30:31Z · modified 2025-06-17T23:00:14.947855Z · JSON