CVE-2025-23042
2 advisories.
PyPI/gradio CVE-2025-23042: high 7.5, EPSS 1.00%
Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) f
Action: Upgrade gradio to 5.6.0 or later.
pip install gradio==5.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.6.0 | - |
Fixed versions
| 5.6.0 |
Sources
CVE-2025-23042 · published · modified · JSON
PyPI/gradio CVE-2025-23042: high 7.5, EPSS 1.00%
Gradio Blocked Path ACL Bypass Vulnerability
Action: Upgrade gradio to 5.11.0 or later.
pip install gradio==5.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.11.0 | - |
Fixed versions
| 5.11.0 |
Sources
- osv: GHSA-j2jg-fq62-7c3h
- nvd: CVE-2025-23042
- https://github.com/gradio-app/gradio/security/advisories/GHSA-j2jg-fq62-7c3h
- https://github.com/gradio-app/gradio/commit/6b63fdec441b5c9bf910f910a2505d8defbb6bf8
- https://github.com/gradio-app/gradio
- https://github.com/gradio-app/gradio/releases/tag/gradio%405.11.0
- https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2025-118.yaml
CVE-2025-23042 · published · modified · JSON