Gradio Project

Gradio Project maintains a focused open-source framework for building machine-learning web interfaces, with vulnerabilities concentrated in the core Gradio library and associated video-handling components. Vulnerabilities affecting this vendor skew toward serious outcomes, with an elevated share reaching critical severity and a frequent tendency toward public exploit availability, reflecting the exposure inherent to web-facing applications that handle user input and file operations. The exposure recurs through weakness classes including path traversal, server-side request forgery, open redirect, and improper authorization that are characteristic of web frameworks processing untrusted input and managing access controls across HTTP interfaces. Defenders should treat Gradio deployments—particularly those exposed to untrusted networks or handling sensitive data—as requiring prompt patching when advisories are released, given the combination of serious severity and public exploit tooling. Current exploitation activity and exposure counts are shown alongside this summary.