gradio-app/gradio · Security

Gradio's Component Server does not properly consider` _is_server_fn` for functions

GHSA ID
GHSA-34rf-p3r3-58x2
CVE ID
CVE-2024-34511
Severity
medium
Published
Updated
CVSS
6.5 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v3
6.5 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

Component Server in Gradio before 4.13 does not properly consider _is_server_fn for functions.

References