CVE catalog

CVE-2023-51449

PYSEC-2023-249

[CVE catalog]

Severity
Medium · CVSS 5.6CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
28.34% · Oct 25, 2026

A directory traversal flaw was discovered in Gradio. In certain circumstances, a remote attacker may be able to alter the URL path to access arbitrary files on a server running Gradio. Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
PyPIgradioNot reported4.11.0fixed
PyPIgradioNot reported4.11.0fixed
PyPIgradioNot reported1b9d4234d6c25ef250d882c7b90e1f4039ed2d76fixed
PyPIgradioNot reported7ba8c5da45b004edd12c0460be9222f5b5f5f055fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
PyPIgradioPyPINot reported4.11.0Not reportedGHSA-6QM2-WPXQ-7QH2Not reported
PyPIgradioPyPINot reported4.11.0Not reportedPYSEC-2023-249Not reported
PyPIgradioPyPINot reported1b9d4234d6c25ef250d882c7b90e1f4039ed2d76Not reportedPYSEC-2023-249Not reported
PyPIgradioPyPINot reported7ba8c5da45b004edd12c0460be9222f5b5f5f055Not reportedPYSEC-2023-249Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]