Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/Aaron911/PoC/blob/main/Gradio.md | Exploit Third Party Advisory |
| https://github.com/Aaron911/PoC/blob/main/Gradio.md | Exploit Third Party Advisory |
| https://github.com/advisories/GHSA-9v2f-6vcg-3hgv | Third Party Advisory |
| https://github.com/advisories/GHSA-9v2f-6vcg-3hgv | Third Party Advisory |
| https://github.com/gradio-app/gradio/issues/8853 | Exploit Issue Tracking Vendor Advisory |
| https://github.com/gradio-app/gradio/issues/8853 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
27 Jun 2025, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gradio Project
Gradio Project gradio |
|
| CPE | cpe:2.3:a:gradio_project:gradio:4.36.1:*:*:*:*:python:*:* | |
| References | () https://github.com/gradio-app/gradio/issues/8853 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://github.com/Aaron911/PoC/blob/main/Gradio.md - Exploit, Third Party Advisory | |
| References | () https://github.com/advisories/GHSA-9v2f-6vcg-3hgv - Third Party Advisory |
22 Jul 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself. |
01 Jul 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-01 19:15
Updated : 2025-06-27 17:32
NVD link : CVE-2024-39236
Mitre link : CVE-2024-39236
JSON object : View
Products Affected
gradio_project
- gradio
CWE
No CWE.