{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"5.0.0","last_affected":"5.29.1"}],"component":"gradio","cve_ids":["CVE-2025-5320"],"ecosystem":"PyPI","epss":0.00268,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wmjh-cpqj-4v6x","id":"tcs_01M5KGSGXQBV1X16MDBZ6YR4BE","modified_at":"2026-07-07T17:47:41.380498328Z","published_at":"2026-07-07T16:02:53.404531Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1423","https://nvd.nist.gov/vuln/detail/CVE-2025-5320","https://gist.github.com/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe","https://gist.github.com/superboy-zjc/aa3dfa161d7b19d8a53ab4605792f2fe#proof-of-concept-poc","https://github.com/gradio-app/gradio","https://vuldb.com/?ctiid.310491","https://vuldb.com/?id.310491","https://vuldb.com/?submit.580250","https://pypi.org/project/gradio","https://github.com/advisories/GHSA-wmjh-cpqj-4v6x"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-1423","url":"https://osv.dev/vulnerability/PYSEC-2026-1423"}],"summary":"Gradio CORS Origin Validation Bypass Vulnerability"}