Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Gradio

CVE-2024-34511: Gradio's Component Server does not properly consider` _is_server_fn` for functions

mediumCVSS 3.1 6.5GHSA-34rf-p3r3-58x2

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions.

Published May 5, 2024 · Updated May 6, 2024

Affected packages

gradio

Ecosystem
PyPI
Affected
< 4.13.0
Fixed in
4.13.0
Check
pip show gradio

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Component Server in Gradio before 4.13 does not properly consider _is_server_fn for functions.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Gradio vulnerabilities

All Gradio entries