PyPI/gradio CVE-2024-1729: medium 5.9, EPSS 0.50%

Gradio apps vulnerable to timing attacks to guess password

Action: Upgrade gradio to 4.19.2 or later.

pip install gradio==4.19.2

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1416
• https://github.com/gradio-app/gradio/security/advisories/GHSA-hmx6-r76c-85g9
• https://nvd.nist.gov/vuln/detail/CVE-2024-1729
• https://github.com/gradio-app/gradio/commit/e329f1fd38935213fe0e73962e8cbd5d3af6e87b
• https://github.com/gradio-app/gradio
• https://github.com/gradio-app/gradio/releases/tag/gradio%404.19.2
• https://huntr.com/bounties/f6a10a8d-f538-4cb7-9bb2-85d9f5708124
• https://pypi.org/project/gradio
• https://github.com/advisories/GHSA-hmx6-r76c-85g9

CVE-2024-1729 · published 2026-07-07T11:45:32.827149Z · modified 2026-07-07T17:47:40.256281104Z · JSON