CVE-2024-4253
1 advisory.
PyPI/gradio CVE-2024-4253: critical 9.1
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
Action: Upgrade gradio to 4.29.0 or later.
pip install gradio==4.29.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.29.0 | - |
Fixed versions
| 4.29.0 |
Sources
- osv: PYSEC-2024-321
- https://github.com/gradio-app/gradio/commit/a0e70366a8a406fdd80abb21e8c88a3c8e682a2b
- https://huntr.com/bounties/23cb3749-8ae9-4e1a-9023-4a20ca6b675e
CVE-2024-4253 · published · modified · JSON