gradio
Build and share delightful machine learning apps, all in Python. 🌟 Star to support our work!
View on Github
Activity
- Latest release
- 3d ago
- Total releases
- 676
- Cadence
- ~5 days
- Last 12 months
- 45
Reach
- Stars
- 43.5k
Details
- License
- Apache-2.0
- First release
- Feb 19, 2019
Releases
| Version | Released | |
|---|---|---|
6.27.0
minor
| ||
6.26.0
minor
| ||
6.25.0
minor
| ||
6.24.0
minor
| ||
6.23.1
minor
| ||
6.22.0
minor
| ||
6.21.0
minor
| ||
6.20.0
minor
| ||
6.19.0
minor
| ||
6.18.0
minor
| ||
6.17.3
minor
| ||
6.16.0
minor
| ||
6.15.2
patch
1 CVE
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
6.15.1
patch
1 CVE
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev | ||
6.15.0
minor
2 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev | ||
6.14.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.13.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.12.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.11.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.10.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.9.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.8.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.7.0
minor
3 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev | ||
6.6.0
minor
4 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev | ||
6.5.1
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.5.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.4.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.3.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.2.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.1.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.50.1.dev1
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.2
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.50.1.dev0
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.1
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.50.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.50.0.dev0
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.0
major
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.0.dev5
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.0.dev4
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.0.dev3
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.0.dev1
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
6.0.0.dev0
pre
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.49.1
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.49.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.48.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.47.2
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.47.1
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.47.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.46.1
patch
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev | ||
5.46.0
minor
7 CVEs
CVE-2026-49119
PYSEC-2026-2179
Jul 01, 2026
High
Network
Low
None
None
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplying path segments containing directory traversal sequences or absolute paths. Attackers can provide crafted path segments that cause os.path.join to discard the root_dir prefix entirely, resulting in arbitrary file read or exposure of sensitive files outside the intended directory. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 652 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.15.1
6.15.2
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.16.0
References Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-10783
GHSA-6655-8ph2-63j3
PYSEC-2026-211
Jun 04, 2026
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Low
Local
High
Low
None
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 650 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.15.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.1
References
Updated Jul 14, 2026 · Source: OSV.dev
CVE-2026-48545
GHSA-7hp7-4p35-3cx2
PYSEC-2026-2178
May 27, 2026
Gradio contains a cookie injection vulnerability
High
Network
High
None
Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space session fixation by exploiting a shared module-level HTTP client used across all users in the reverse proxy endpoint. Attackers controlling any HF Space can return a parent-domain cookie that the shared client stores and automatically replays into all subsequent proxy requests to other legitimate Spaces, affecting all users of the same Gradio deployment. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 649 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.10.0
6.11.0
6.12.0
6.13.0
6.14.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
6.7.0
6.8.0
6.9.0
Fixed in
6.15.0
References
Updated Jul 13, 2026 · Source: OSV.dev
CVE-2026-28416
GHSA-jmh7-g254-2cq9
PYSEC-2026-66
Mar 01, 2026
Gradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config Processing
8.2
/ 10
High
Network
Low
None
None
Unchanged
High
Low
None
SummaryA Server-Side Request Forgery (SSRF) vulnerability in Gradio allows an attacker to make arbitrary HTTP requests from a victim's server by hosting a malicious Gradio Space. When a victim application uses DetailsThe vulnerability exists in Gradio's config processing flow when loading external Spaces:
An attacker can set PoCFull PoC: https://gist.github.com/logicx24/8d4c1aaa4e70f85d0d0fba06a463f2d6 1. Attacker creates a malicious Gradio Space that returns this config: 2. Victim loads the malicious Space: 3. Attacker exploits the proxy: ImpactWho is impacted:
Attack scenarios:
Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28415
GHSA-pfjf-5gxr-995x
PYSEC-2026-65
Mar 01, 2026
Gradio has an Open Redirect in its OAuth Flow
4.3
/ 10
Medium
Network
Low
None
Required
Unchanged
None
Low
None
SummaryThe _redirect_to_target() function in Gradio's OAuth flow accepts an unvalidated _target_url query parameter, allowing redirection to arbitrary external URLs. This affects the /logout and /login/callback endpoints on Gradio apps with OAuth enabled (i.e. apps running on Hugging Face Spaces with gr.LoginButton). DetailsAn attacker can craft a URL like https://my-space.hf.space/logout?_target_url=https://evil.com/phishing that redirects the user to an external site after logout. Because the URL originates from a trusted hf.space domain, users are more likely to trust the link. ImpactPhishing — an attacker can use the trusted domain to redirect users to a malicious site. No direct data exposure or server-side impact. FixThe _target_url parameter is now sanitized to only use the path, query, and fragment, stripping any scheme or host. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 640 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-28414
GHSA-39mp-8hj3-5c49
PYSEC-2026-64
Mar 01, 2026
Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryGradio apps running on Window with Python 3.13+ are vulnerable to an absolute path traversal issue that enables unauthenticated attackers to read arbitrary files from the file system. DetailsPython 3.13+ changed the definition of This can be exploited by unauthenticated attackers to read arbitrary files from the Gradio server, even when Gradio is set up with authentication. PoCImpactArbitrary file read in the context of the Windows user running Gradio. Affected versions
0.1.0
0.1.1
0.1.2
0.1.3
0.1.4
0.1.5
0.1.6
0.1.7
0.1.8
0.1.9
0.2.0
0.2.1
+ 641 more Show less
0.3.0
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.4.0
0.4.1
0.4.2
0.4.4
0.5.0
0.7.0
0.7.1
0.7.2
0.7.3
0.7.4
0.7.5
0.7.6
0.7.7
0.7.8
0.8.0
0.8.1
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
0.9.7
0.9.8
0.9.9.2
0.9.9.3
0.9.9.5
0.9.9.6
0.9.9.7
0.9.9.8
0.9.9.9
0.9.9.9.2
1.0.0
1.0.0a1
1.0.0a3
1.0.0a4
1.0.1
1.0.2
1.0.3
1.0.4
1.0.5
1.0.6
1.0.7
1.1.0
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.8
1.1.8.1
1.1.9
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.4.0
1.4.2
1.4.3
1.4.4
1.5.0
1.5.1
1.5.3
1.5.4
1.6.0
1.6.1
1.6.2
1.6.3
1.6.4
1.7.0
1.7.1
1.7.2
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
2.0.0
2.0.1
2.0.10
2.0.2
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.1.0
2.1.1
2.1.2
2.1.4
2.1.6
2.1.7
2.2.0
2.2.1
2.2.10
2.2.11
2.2.12
2.2.13
2.2.14
2.2.15
2.2.2
2.2.3
2.2.4
2.2.5
2.2.6
2.2.7
2.2.8
2.2.9a0
2.2.9a2
2.3.0
2.3.0a0
2.3.0b101
2.3.0b102
2.3.0b99
2.3.3
2.3.4
2.3.5
2.3.5b0
2.3.6
2.3.7
2.3.7b0
2.3.7b1
2.3.7b2
2.3.8b0
2.3.9
2.4.0
2.4.0a0
2.4.1
2.4.2
2.4.4
2.4.5
2.4.6
2.4.7b0
2.4.7b2
2.4.7b3
2.4.7b4
2.4.7b5
2.4.7b6
2.4.7b7
2.4.7b8
2.4.7b9
2.5.0
2.5.1
2.5.2
2.5.3
2.5.8a0
2.6.0
2.6.1
2.6.1a0
2.6.1b0
2.6.1b3
2.6.2
2.6.3
2.6.4
2.6.4b0
2.6.4b2
2.6.4b3
2.7.0
2.7.0a101
2.7.0a102
2.7.0b70
2.7.5
2.7.5.1
2.7.5.2
2.7.5.2b0
2.8.0
2.8.0a100
2.8.0b0
2.8.0b10
2.8.0b12
2.8.0b2
2.8.0b20
2.8.0b22
2.8.0b3
2.8.0b4
2.8.0b5
2.8.0b6
2.8.1
2.8.10
2.8.11
2.8.12
2.8.13
2.8.14
2.8.2
2.8.3
2.8.4
2.8.5
2.8.6
2.8.7
2.8.8
2.8.9
2.9.0
2.9.0.1
2.9.0b0
2.9.0b1
2.9.0b10
2.9.0b2
2.9.0b3
2.9.0b5
2.9.0b6
2.9.0b7
2.9.0b8
2.9.0b9
2.9.1
2.9.2
2.9.3
2.9.4
2.9b11
2.9b12
2.9b13
2.9b14
2.9b15
2.9b20
2.9b21
2.9b22
2.9b23
2.9b24
2.9b25
2.9b26
2.9b27
2.9b28
2.9b30
2.9b31
2.9b32
2.9b33
2.9b40
2.9b48
2.9b50
3.0
3.0.1
3.0.10
3.0.10b16
3.0.10b2
3.0.11
3.0.11b1
3.0.12
3.0.13
3.0.13b100
3.0.13b13
3.0.13b15
3.0.14
3.0.15
3.0.16
3.0.17
3.0.18
3.0.18b0
3.0.19
3.0.19b0
3.0.19b1
3.0.19b2
3.0.1b120
3.0.1b121
3.0.1b300
3.0.2
3.0.20
3.0.20.dev0
3.0.21
3.0.22
3.0.23
3.0.23.dev1
3.0.24
3.0.25
3.0.26
3.0.3
3.0.4
3.0.5
3.0.6
3.0.6b1
3.0.6b2
3.0.6b3
3.0.7
3.0.8
3.0.8b1
3.0.9
3.0.9b10
3.0.9b11
3.0.9b20
3.0b0
3.0b1
3.0b10
3.0b2
3.0b5
3.0b6
3.0b8
3.0b9
3.1.0
3.1.1
3.1.2
3.1.3
3.1.3a0
3.1.3a2
3.1.3a3
3.1.3a4
3.1.3a5
3.1.4
3.1.4b0
3.1.4b1
3.1.4b2
3.1.4b3
3.1.4b4
3.1.4b5
3.1.5
3.1.5b1
3.1.5b10
3.1.5b2
3.1.5b3
3.1.5b4
3.1.5b5
3.1.5b7
3.1.5b8
3.1.5b9
3.1.6
3.1.6b1
3.1.7
3.1.8b0
3.1.8b2
3.1.8b3
3.1.8b4
3.1.8b6
3.10.0
3.10.1
3.11.0
3.12.0
3.12.0b1
3.12.0b2
3.12.0b3
3.12.0b6
3.12.0b7
3.13.0
3.13.0b1
3.13.1
3.13.1b0
3.13.1b1
3.13.1b2
3.13.2
3.14.0
3.14.0a1
3.15.0
3.16.0
3.16.1
3.16.1b1
3.16.2
3.17.0
3.17.1
3.17.1b1
3.17.1b2
3.18.0
3.18.1b1
3.18.1b2
3.18.1b3
3.18.1b4
3.18.1b5
3.18.1b6
3.18.1b7
3.19.0
3.19.1
3.2
3.2.1b0
3.2.1b1
3.2.1b2
3.20.0
3.20.0b1
3.20.0b2
3.20.1
3.21.0
3.22.0
3.22.1
3.22.1b1
3.23.0
3.23.1b1
3.23.1b2
3.23.1b3
3.24.0
3.24.1
3.25.0
3.25.1b1
3.25.1b2
3.26.0
3.27.0
3.28.0
3.28.1
3.28.2
3.28.3
3.28.4b0
3.29.0
3.3
3.3.1
3.30.0
3.31.0
3.32.0
3.33.0
3.33.1
3.34.0
3.35.0
3.35.1
3.35.2
3.36.0
3.36.1
3.37.0
3.38.0
3.39.0
3.3b0
3.3b1
3.4
3.4.1
3.40.0
3.40.1
3.41.0
3.41.1
3.41.2
3.42.0
3.43.0
3.43.1
3.43.2
3.44.0
3.44.1
3.44.2
3.44.3
3.44.4
3.45.0
3.45.0b0
3.45.0b10
3.45.0b11
3.45.0b12
3.45.0b13
3.45.0b9
3.45.1
3.45.2
3.46.0
3.46.1
3.47.0
3.47.1
3.48.0
3.49.0
3.4b0
3.4b1
3.4b2
3.4b3
3.4b5
3.5
3.50.0
3.50.1
3.50.2
3.6
3.6.0b1
3.6.0b10
3.6.0b2
3.6.0b3
3.6.0b7
3.7
3.8
3.8.1
3.8.1.dev1
3.8.2
3.8b1
3.8b2
3.9
3.9.1
4.0.0
4.0.0b15
4.0.1
4.0.2
4.1.0
4.1.1
4.1.2
4.10.0
4.11.0
4.12.0
4.13.0
4.14.0
4.15.0
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.2.0
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.3.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.4.0
4.4.1
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
4.5.0
4.7.0
4.7.1
4.8.0
4.9.0
4.9.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
6.6.0
Fixed in
6.7.0
References
Updated Jun 06, 2026 · Source: OSV.dev
CVE-2026-27167
GHSA-h3h8-3v2v-rg7m
PYSEC-2026-63
Mar 01, 2026
Gradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret
0.0
/ 10
None
Network
High
None
None
Unchanged
None
None
None
SummaryGradio applications running outside of Hugging Face Spaces automatically enable "mocked" OAuth routes when OAuth components (e.g. Affected Component
Root Cause Analysis1. Real token injected into every visitor's sessionWhen Gradio detects it is not running inside a Hugging Face Space ( The function The 2. Hardcoded session signing secretThe When running outside a Space, In practice, Starlette's Attack ScenarioPrerequisites
Steps
Minimal Vulnerable ApplicationProof of ConceptAffected versions
4.16.0
4.17.0
4.18.0
4.19.0
4.19.1
4.19.2
4.20.0
4.20.1
4.21.0
4.22.0
4.23.0
4.24.0
+ 137 more Show less
4.25.0
4.26.0
4.27.0
4.28.0
4.28.1
4.28.2
4.28.3
4.29.0
4.31.0
4.31.1
4.31.2
4.31.3
4.31.4
4.31.5
4.32.0
4.32.1
4.32.2
4.33.0
4.35.0
4.36.0
4.36.1
4.37.1
4.37.2
4.38.0
4.38.1
4.39.0
4.40.0
4.41.0
4.42.0
4.43.0
4.44.0
4.44.1
5.0.0
5.0.0b1
5.0.0b10
5.0.0b5
5.0.0b6
5.0.0b7
5.0.0b8
5.0.0b9
5.0.1
5.0.2
5.1.0
5.10.0
5.11.0
5.12.0
5.13.0
5.13.1
5.13.2
5.14.0
5.15.0
5.16.0
5.16.1
5.16.2
5.17.0
5.17.1
5.18.0
5.19.0
5.20.0
5.20.1
5.21.0
5.22.0
5.23.0
5.23.1
5.23.2
5.23.3
5.24.0
5.25.0
5.25.1
5.25.2
5.26.0
5.27.0
5.27.1
5.28.0
5.29.0
5.29.1
5.3.0
5.30.0
5.31.0
5.32.0
5.32.1
5.33.0
5.33.1
5.33.2
5.34.0
5.34.1
5.34.2
5.35.0
5.36.2
5.37.0
5.38.0
5.38.1
5.38.2
5.39.0
5.4.0
5.40.0
5.41.0
5.41.1
5.42.0
5.43.0
5.43.1
5.44.0
5.44.1
5.45.0
5.46.0
5.46.1
5.47.0
5.47.1
5.47.2
5.48.0
5.49.0
5.49.1
5.5.0
5.50.0
5.50.0.dev0
5.50.1.dev0
5.50.1.dev1
5.6.0
5.7.0
5.7.1
5.8.0
5.9.0
5.9.1
6.0.0
6.0.0.dev0
6.0.0.dev1
6.0.0.dev3
6.0.0.dev4
6.0.0.dev5
6.0.1
6.0.2
6.1.0
6.2.0
6.3.0
6.4.0
6.5.0
6.5.1
Fixed in
6.6.0
References
Updated Jun 05, 2026 · Source: OSV.dev |
1–50 of 676