{"action":"Upgrade gradio to 2.5.0 or later.","affected":[{"fixed":"2.5.0","introduced":"0"}],"component":"gradio","cve_ids":["CVE-2021-43831"],"ecosystem":"PyPI","epss":0.03855,"exploited":false,"fixed_versions":["2.5.0"],"ghsa_id":"GHSA-rhq2-3vr9-6mcr","id":"tcs_01M5KGFRFF6BN4A14CK93TKQP1","modified_at":"2023-11-08T04:07:13.852761Z","published_at":"2021-12-15T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-873","https://github.com/gradio-app/gradio/commit/41bd3645bdb616e1248b2167ca83636a2653f781","https://github.com/gradio-app/gradio/security/advisories/GHSA-rhq2-3vr9-6mcr"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-873","url":"https://osv.dev/vulnerability/PYSEC-2021-873"}],"summary":"Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares G"}