Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 22:17:24 +0000 CVE-2024-10648 — Path Traversal in gradio-app/gradio https://cve.radiocsirt.org/vuln/cve-2024-10648 <p><strong>Affected:</strong> gradio-app/gradio</p> <p>A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.</p> <p><strong>Affected:</strong> gradio-app/gradio</p> <p>A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.</p> https://cve.radiocsirt.org/vuln/cve-2024-10648 GHSA-pgfv-gvc5-prfg — Gradio Vulnerable to Arbitrary File Deletion https://cve.radiocsirt.org/vuln/ghsa-pgfv-gvc5-prfg <p><strong>Affected:</strong> PyPI: gradio</p> <p>A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.</p> <p><strong>Affected:</strong> PyPI: gradio</p> <p>A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-pgfv-gvc5-prfg