CVE-2024-10569
2 advisories.
PyPI/gradio CVE-2024-10569: high 7.5, EPSS 0.66%
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | - | 5.0.0b2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7xmc-vhjp-qv5q
- https://nvd.nist.gov/vuln/detail/CVE-2024-10569
- https://github.com/gradio-app/gradio
- https://github.com/gradio-app/gradio/blob/98cbcaef827de7267462ccba180c7b2ffb1e825d/gradio/components/dataframe.py#L263
- https://huntr.com/bounties/7192bcbb-08a3-4d22-a321-9c6d19dbfc74
CVE-2024-10569 · published · modified · JSON
PyPI/gradio CVE-2024-10569: high 7.5, EPSS 0.66%
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | - | 5.0.0b2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1412
- https://nvd.nist.gov/vuln/detail/CVE-2024-10569
- https://github.com/gradio-app/gradio
- https://github.com/gradio-app/gradio/blob/98cbcaef827de7267462ccba180c7b2ffb1e825d/gradio/components/dataframe.py#L263
- https://huntr.com/bounties/7192bcbb-08a3-4d22-a321-9c6d19dbfc74
- https://pypi.org/project/gradio
- https://github.com/advisories/GHSA-7xmc-vhjp-qv5q
CVE-2024-10569 · published · modified · JSON