{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"5.0.0","last_affected":"5.29.1"}],"component":"gradio","cve_ids":["CVE-2025-5320"],"ecosystem":"PyPI","epss":0.00268,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wmjh-cpqj-4v6x","id":"tcs_01M5KG2G4QJVJY8V0GN1B5FPTK","modified_at":"2026-07-07T17:56:26.709151607Z","published_at":"2025-05-29T15:31:09Z","references":["https://osv.dev/vulnerability/GHSA-wmjh-cpqj-4v6x","https://nvd.nist.gov/vuln/detail/CVE-2025-5320","https://gist.github.com/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe","https://gist.github.com/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe#proof-of-concept-poc","https://github.com/gradio-app/gradio","https://vuldb.com/?ctiid.310491","https://vuldb.com/?id.310491","https://vuldb.com/?submit.580250"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-wmjh-cpqj-4v6x","url":"https://osv.dev/vulnerability/GHSA-wmjh-cpqj-4v6x"}],"summary":"Gradio CORS Origin Validation Bypass Vulnerability"}