PyPI/gradio CVE-2023-34239: unknown, EPSS 0.65%
Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not properly restrict file access to users. Additionally Gr
Action: Upgrade gradio to 3.34.0 or later.
pip install gradio==3.34.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.34.0 | - |
Fixed versions
| 3.34.0 |
Sources
- osv: PYSEC-2023-90
- https://github.com/gradio-app/gradio/pull/4370
- https://github.com/gradio-app/gradio/pull/4406
- https://github.com/gradio-app/gradio/security/advisories/GHSA-3qqg-pgqq-3695
CVE-2023-34239 · published · modified · JSON