A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of wea
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Python (PyPI) | gradio | <= 6.14.0 | sin corrección |
Referencias
- https://nvd.nist.gov/vuln/detail/CVE-2026-10783
- https://github.com/gradio-app/gradio/issues/13395
- https://github.com/gradio-app/gradio/pull/13394
- https://github.com/gradio-app/gradio/commit/1c609af6918b20d0b4347b9f41b04569d6adca24
- https://github.com/gradio-app/gradio
- https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-211.yaml
- https://vuldb.com/cve/CVE-2026-10783
- https://vuldb.com/submit/831451
- https://vuldb.com/vuln/368140
- https://vuldb.com/vuln/368140/cti
- https://github.com/gradio-app/gradio/
- https://github.com/advisories/GHSA-6655-8ph2-63j3
- Vector CVSS
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N- Debilidad (CWE)
CWE-327- Plataforma
- Python (PyPI)
- Paquete
gradio- Publicada
- 04.06.2026
- Actualizado
- 11.10.2026 14:18
Fuentes y licencias
OSV / GitHub Advisory Database - GHSA-6655-8ph2-63j3 - CC BY 4.0
OSV / GitHub Advisory Database - PYSEC-2026-211 - PyPA Advisory Database; CC BY 4.0
Historial de vulnerabilidades: gradio
Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
- Entradas en total
- 51
- Primera → última
- 12.2021 07.2026
- Sin corrección
- 13
- Explotada en ataques
- 0
Distribución por gravedad
- Crítica 5
- Alta 19
- Media 22
- Baja 5
Divulgaciones por año
- 2021: 1
- 2022: 1
- 2023: 5
- 2024: 28
- 2025: 9
- 2026: 7
-
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of wea esta entrada
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.