PyPI/gradio CVE-2021-43831: unknown, EPSS 3.85%

Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares G

Action: Upgrade gradio to 2.5.0 or later.

pip install gradio==2.5.0

Affected

Fixed versions

Sources

• osv: PYSEC-2021-873
• https://github.com/gradio-app/gradio/commit/41bd3645bdb616e1248b2167ca83636a2653f781
• https://github.com/gradio-app/gradio/security/advisories/GHSA-rhq2-3vr9-6mcr

CVE-2021-43831 · published 2021-12-15T20:15:00Z · modified 2023-11-08T04:07:13.852761Z · JSON