CVE-2024-34511: Gradio's Component Server does not properly consider` _is_server_fn` for functions

May 5, 2024 (updated May 6, 2024)

Component Server in Gradio before 4.13 does not properly consider _is_server_fn for functions.

References

github.com/advisories/GHSA-34rf-p3r3-58x2
github.com/gradio-app/gradio
github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2
nvd.nist.gov/vuln/detail/CVE-2024-34511
www.gradio.app/changelog

Code Behaviors & Features

Detect and mitigate CVE-2024-34511 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →