https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T03:45:18.679485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223938 EUVD-2026-223938 2026-10-04T03:45:18.750741+00:00 EUVD-2026-223938 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10569 fkie_cve-2024-10569 2026-10-04T03:45:18.750782+00:00

A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server crash and causing a denial of service.

 https://cve.radiocsirt.org/vuln/ghsa-7xmc-vhjp-qv5q GHSA-7xmc-vhjp-qv5q — Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb 2026-10-04T03:45:18.750817+00:00

Affected: PyPI: gradio

A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server crash and causing a denial of service.

 https://cve.radiocsirt.org/vuln/pysec-2026-1412 PYSEC-2026-1412 — Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb 2026-10-04T03:45:18.750842+00:00

Affected: PyPI: gradio

A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed files. An attacker can exploit this by uploading a maliciously crafted zip bomb, leading to a server crash and causing a denial of service.