Advisory Database
  • Advisories
  • Dependency Scanning
  1. pypi
  2. ›
  3. gradio
  4. ›
  5. CVE-2026-10783

CVE-2026-10783: Gradio: Audio cache key ignores metadata when saving numpy audio outputs

June 4, 2026 (updated July 14, 2026)

A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been released to the public and may be used for attacks. The patch is named 13394. To fix this issue, it is recommended to deploy a patch.

References

  • github.com/advisories/GHSA-6655-8ph2-63j3
  • github.com/gradio-app/gradio
  • github.com/gradio-app/gradio/commit/1c609af6918b20d0b4347b9f41b04569d6adca24
  • github.com/gradio-app/gradio/issues/13395
  • github.com/gradio-app/gradio/pull/13394
  • github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2026-211.yaml
  • nvd.nist.gov/vuln/detail/CVE-2026-10783
  • vuldb.com/cve/CVE-2026-10783
  • vuldb.com/submit/831451
  • vuldb.com/vuln/368140
  • vuldb.com/vuln/368140/cti

Code Behaviors & Features

Detect and mitigate CVE-2026-10783 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →

Affected versions

All versions before 6.15.1

Fixed versions

  • 6.15.1

Solution

Upgrade to version 6.15.1 or above.

Impact 2.5 LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Learn more about CVSS

Weakness

  • CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Source file

pypi/gradio/CVE-2026-10783.yml

Spotted a mistake? Edit the file on GitLab.

  • Site Repo
  • About GitLab
  • Terms
  • Privacy Statement
  • Contact

Page generated Sat, 08 Aug 2026 00:18:28 +0000.