CVE-2024-34511

Impact

Component Server in Gradio before 4.13 does not properly consider` _is_server_fn` for functions.

Affected packages

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/advisories/GHSA-34rf-p3r3-58x2
• https://nvd.nist.gov/vuln/detail/CVE-2024-34511
• https://www.gradio.app/changelog#4-13-0
• https://github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2