CVE-2026-10783
2 advisories.
PyPI/gradio CVE-2026-10783: low 2.5, EPSS 0.11%
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Action: Upgrade gradio to 6.15.1 or later.
pip install gradio==6.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.15.1 | - |
Fixed versions
| 6.15.1 |
Sources
- osv: GHSA-6655-8ph2-63j3
- https://nvd.nist.gov/vuln/detail/CVE-2026-10783
- https://github.com/gradio-app/gradio/issues/13395
- https://github.com/gradio-app/gradio/pull/13394
- https://github.com/gradio-app/gradio/commit/1c609af6918b20d0b4347b9f41b04569d6adca24
- https://github.com/gradio-app/gradio
- https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-211.yaml
- https://vuldb.com/cve/CVE-2026-10783
- https://vuldb.com/submit/831451
- https://vuldb.com/vuln/368140
- https://vuldb.com/vuln/368140/cti
CVE-2026-10783 · published · modified · JSON
PyPI/gradio CVE-2026-10783: low 2.5, EPSS 0.11%
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of wea
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.14.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-211
- https://github.com/gradio-app/gradio/
- https://vuldb.com/cve/CVE-2026-10783
- https://vuldb.com/submit/831451
- https://vuldb.com/vuln/368140
- https://github.com/gradio-app/gradio/issues/13395
- https://vuldb.com/vuln/368140/cti
- https://github.com/gradio-app/gradio/pull/13394
- https://github.com/advisories/GHSA-6655-8ph2-63j3
CVE-2026-10783 · published · modified · JSON