{"action":"Upgrade gradio to 3.13.1 or later.","affected":[{"fixed":"3.13.1","introduced":"0"}],"component":"gradio","cve_ids":["CVE-2023-25823"],"ecosystem":"PyPI","epss":0.00553,"exploited":false,"fixed_versions":["3.13.1"],"ghsa_id":"GHSA-3x5j-9vwr-8rr5","id":"tcs_01M5KGJKRCQG1BGE89M2FKK7FH","modified_at":"2023-11-08T04:11:56.117748Z","published_at":"2023-02-23T22:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-16","https://github.com/gradio-app/gradio/security/advisories/GHSA-3x5j-9vwr-8rr5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-16","url":"https://osv.dev/vulnerability/PYSEC-2023-16"}],"summary":"Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use of Hard-coded Credentials. When using Gradio's share"}