tocsin

PyPI/gradio CVE-2024-47871: critical 9.1, EPSS 0.18%

Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **insecure communication** between the FRP (Fast Reverse Proxy) client and server when Gradio's `sha

Action: Upgrade gradio to 5.0.0 or later.

pip install gradio==5.0.0

Affected

introducedfixedlast affected
05.0.0-

Fixed versions

5.0.0

Sources

CVE-2024-47871 · published · modified · JSON