gradio@5.0.1 vulnerabilities

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Path Equivalence due to the blocked_path() function only blocking standard pathnames. On Windows systems, an attacker can read unauthorized files by using NTFS Alternate Data Streams syntax to bypass path restrictions.

There is no fixed version for gradio.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Open Redirect. The validate_url() function can be forced to follow a redirect to an unintended site if the URL is passed to the file parameter and includes URL encoding.

There is no fixed version for gradio.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Denial of Service (DoS) through the file upload process. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue warnings. This can render the system inaccessible for extended periods, disrupting services and causing significant downtime.

Upgrade gradio to version 5.8.0 or higher.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Undefined Behavior for Input to API via the dataframe component. An attacker can cause a server crash and denial of service by uploading a maliciously crafted zip bomb.

There is no fixed version for gradio.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) through the gr.Datetime component. An attacker can cause the server to consume excessive CPU resources and potentially lead to a service disruption by sending a specially crafted HTTP request.

There is no fixed version for gradio.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the Audio component. An attacker can delete arbitrary file content by manipulating the output format, resetting any file to an empty state and causing a denial of service on the server.

There is no fixed version for gradio.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the remove_html_tags() function in utils.py, which can be exploited by a user to cause the application to hang during deployment.

Upgrade gradio to version 5.13.0 or higher.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to improper case normalization in the file path validation logic through the blocked_paths parameter of the is_allowed_file function. An attacker can gain unauthorized access to sensitive files by altering the letter case of a blocked file or directory path.

Note:

This is only exploitable on case-insensitive file systems, such as Windows and macOS.

Upgrade gradio to version 5.11.0 or higher.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Directory Traversal due to the improper handling of file paths in the processing_utils.async_move_files_to_cache function. An attacker can read arbitrary files from the server by manipulating the file path input to bypass the security checks that are supposed to restrict file access to only those uploaded by a user.

Note:

This is only exploitable if the application uses the File or UploadButton components to upload files and echo/preview the content to the user.

Upgrade gradio to version 5.5.0 or higher.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) due to no restrictions on the URL, in the save_url_to_cache function. An attacker can access and download local resources and sensitive information.

There is no fixed version for gradio.

gradio is a Python library for easily interacting with trained machine learning models

Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper check of the input, when users generate pyi. An attacker can execute arbitrary code by supplying crafted input.

Note:

This vulnerability is disputed by the maintainer because the report is about a user attacking himself.

There is no fixed version for gradio.