high7.5
CVE-2024-34510
Gradio allows credential leakage on Windows
Impact
Gradio before 4.20 allows credential leakage on Windows.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | gradio | < 4.20.0 | 4.20.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gradio Project | Gradio | before 4.20.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/gradio-app/gradio/
- https://www.gradio.app/changelog#4-20-0
- https://github.com/advisories/GHSA-rvfh-h6c7-fc3c
- https://nvd.nist.gov/vuln/detail/CVE-2024-34510
- https://github.com/gradio-app/gradio
- https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2024-255.yaml