GradioPYSEC-2024-274
Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself.
Critical9.8CVE-2024-39236 · Published Jul 1, 2024 · updated May 21, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| gradio PyPI | <= 4.36.1 | No fix yet |
Details and references
Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the CVSS score
- Also known as
- CVE-2024-39236, GHSA-9v2f-6vcg-3hgv
More Gradio advisories
All Gradio| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jun 222024 | Open redirect in gradio CVE-2024-4940Medium5.4no fix yet | Medium5.4 | No fix yet |
| Jun 62024 | Local file inclusion in gradio CVE-2024-4941High7.5fixed in 4.31.3 | High7.5 | 4.31.3 |
| Jun 62024 | Server-Side Request Forgery in gradio CVE-2024-4325High8.6no fix yet | High8.6 | No fix yet |
| Jun 42024 | A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or secret CVE-2024-4253Critical9.1fixed in 4.29.0 | Critical9.1 | 4.29.0 |
| May 212024 | Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files CVE-2024-1727Medium4.3fixed in 4.19.2 | Medium4.3 | 4.19.2 |
| May 52024 | Gradio's Component Server does not properly consider` _is_server_fn` for functions CVE-2024-34511Medium6.5fixed in 4.13.0 | Medium6.5 | 4.13.0 |