PyPI/gradio CVE-2024-2206: high 7.3, EPSS 0.42%

gradio Server-Side Request Forgery vulnerability

Action: Upgrade gradio to 4.18.0 or later.

pip install gradio==4.18.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1420
• https://nvd.nist.gov/vuln/detail/CVE-2024-2206
• https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6
• https://github.com/gradio-app/gradio
• https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e
• https://pypi.org/project/gradio
• https://github.com/advisories/GHSA-r364-m2j9-mf4h

CVE-2024-2206 · published 2026-07-07T11:45:36.786545Z · modified 2026-07-07T17:47:41.233536073Z · JSON