{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"4.37.2"}],"component":"gradio","cve_ids":["CVE-2024-8021"],"ecosystem":"PyPI","epss":0.00759,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-7v2w-h4gh-w5cv","id":"tcs_01M5KGSEHP3AZTN3J4KYJAA1SP","modified_at":"2026-07-07T17:47:40.303250674Z","published_at":"2026-07-07T14:34:56.196943Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1411","https://nvd.nist.gov/vuln/detail/CVE-2024-8021","https://github.com/gradio-app/gradio","https://huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888","https://pypi.org/project/gradio","https://github.com/advisories/GHSA-7v2w-h4gh-w5cv"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-1411","url":"https://osv.dev/vulnerability/PYSEC-2026-1411"}],"summary":"Gradio Vulnerable to Open Redirect"}