Lucene search

GitHub Advisory DatabaseGHSA-34RF-P3R3-58X2

HistoryMay 05, 2024 - 9:30 p.m.

Gradio's Component Server does not properly consider` _is_server_fn` for functions

2024-05-0521:30:31

GitHub Advisory Database

github.com

gradio

component server

vulnerability

software

function restriction

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

Component Server in Gradio before 4.13 does not properly consider _is_server_fn for functions.

Affected configurations

Vulners

Node

gradio_projectgradioRange<4.13.0python

VendorProductVersionCPE
gradio_projectgradio*cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*

Vendor	Product	Version	CPE
gradio_project	gradio	*	cpe:2.3:a:gradio_project:gradio::::::python::*

github.com/advisories/GHSA-34rf-p3r3-58x2

github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2

nvd.nist.gov/vuln/detail/CVE-2024-34511

www.gradio.app/changelog#4-13-0