Medium
CVE-2026-6608
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filters
Low
CVE-2025-50736
Byaidu PDFMathTranslate vulnerable to open redirect
Low
CVE-2025-5320
Gradio CORS Origin Validation Bypass Vulnerability
High
CVE-2024-8966
Gradio DOS in multipart boundry while uploading the file
Medium
CVE-2024-8021
Gradio Vulnerable to Open Redirect
Medium
CVE-2024-12217
Gradio Path Traversal vulnerability
High
CVE-2024-10624
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
High
CVE-2024-10648
Gradio Vulnerable to Arbitrary File Deletion
High
CVE-2024-10569
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
Medium
CVE-2024-48052
gradio Server Side Request Forgery vulnerability
Medium
CVE-2024-4940
Open redirect in gradio
High
CVE-2024-4325
Server-Side Request Forgery in gradio
Medium
CVE-2024-1727
Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
Medium
CVE-2024-34511
Gradio's Component Server does not properly consider` _is_server_fn` for functions
High
CVE-2024-1561
gradio vulnerable to Path Traversal
Medium
CVE-2024-1183
gradio Server-Side Request Forgery vulnerability
High
CVE-2024-2206
gradio Server-Side Request Forgery vulnerability
Medium
CVE-2024-1729
Gradio apps vulnerable to timing attacks to guess password
Medium
CVE-2023-41626
Gradio arbitrary file upload vulnerability
High
CVE-2026-49119
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
Low
CVE-2026-10783
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of wea
Medium
CVE-2026-48545
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across
High
CVE-2026-28416
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
Medium
CVE-2026-28415
Gradio has an Open Redirect in its OAuth Flow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.