{"api_version":"v1","generated_at":"2026-10-09T13:00:00+00:00","product":{"cve_count":29,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-gradio-app-gradio-ad066c3e4990","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/gradio","name":"gradio","next_cursor":null,"observations":[{"affected":"gradio: < 6.20.0","affected_versions_present":true,"cve_id":"CVE-2026-59806","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59806","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-10-08T15:51:35.232Z","patch_url":"","primary_source":"","published":"2026-07-08T19:43:32.730Z"},{"affected":"< 6.16.0","affected_versions_present":true,"cve_id":"CVE-2026-49119","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-49119","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-07-14T21:33:12.523Z","patch_url":"https://github.com/gradio-app/gradio/pull/13437","primary_source":"","published":"2026-07-01T18:30:38.749Z"},{"affected":"6.14.0","affected_versions_present":true,"cve_id":"CVE-2026-10783","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-10783","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-06-04T14:19:42.477Z","patch_url":"https://github.com/gradio-app/gradio/pull/13394","primary_source":"","published":"2026-06-03T23:30:12.545Z"},{"affected":"gradio: < 6.15.0","affected_versions_present":true,"cve_id":"CVE-2026-48545","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-48545","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-10-08T15:22:58.029Z","patch_url":"https://github.com/gradio-app/gradio/pull/13384","primary_source":"","published":"2026-05-27T14:59:33.071Z"},{"affected":"< 6.6.0","affected_versions_present":true,"cve_id":"CVE-2026-28416","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28416","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-02T21:59:40.942Z","patch_url":"","primary_source":"","published":"2026-02-27T21:47:04.975Z"},{"affected":"< 6.6.0","affected_versions_present":true,"cve_id":"CVE-2026-28415","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28415","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-02T21:55:38.664Z","patch_url":"","primary_source":"","published":"2026-02-27T21:44:51.956Z"},{"affected":"< 6.7","affected_versions_present":true,"cve_id":"CVE-2026-28414","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-28414","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-02T22:02:17.902Z","patch_url":"","primary_source":"","published":"2026-02-27T21:43:28.453Z"},{"affected":">= 4.16.0, < 6.6.0","affected_versions_present":true,"cve_id":"CVE-2026-27167","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-27167","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-03-02T22:02:47.868Z","patch_url":"","primary_source":"","published":"2026-02-27T21:40:57.917Z"},{"affected":"< 5.31.0","affected_versions_present":true,"cve_id":"CVE-2025-48889","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-48889","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-05-30T12:25:35.195Z","patch_url":"","primary_source":"","published":"2025-05-30T06:12:32.703Z"},{"affected":"5.29.0; 5.29.1","affected_versions_present":true,"cve_id":"CVE-2025-5320","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-5320","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-06-01T04:39:35.844Z","patch_url":"","primary_source":"","published":"2025-05-29T13:31:04.612Z"},{"affected":"< 5.6.0","affected_versions_present":true,"cve_id":"CVE-2025-23042","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-23042","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-02-12T20:31:19.766Z","patch_url":"https://github.com/gradio-app/gradio/security/advisories/GHSA-j2jg-fq62-7c3h","primary_source":"","published":"2025-01-14T18:49:16.329Z"},{"affected":">= 5.0.0, < 5.5.0","affected_versions_present":true,"cve_id":"CVE-2024-51751","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-51751","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-11-06T19:58:13.376Z","patch_url":"","primary_source":"","published":"2024-11-06T19:11:38.731Z"},{"affected":"< 5.0","affected_versions_present":true,"cve_id":"CVE-2024-47867","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47867","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:06:32.529Z","patch_url":"","primary_source":"","published":"2024-10-10T22:19:11.631Z"},{"affected":"< 5.0","affected_versions_present":true,"cve_id":"CVE-2024-47868","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47868","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:08:03.724Z","patch_url":"","primary_source":"","published":"2024-10-10T22:18:02.068Z"},{"affected":"< 4.44","affected_versions_present":true,"cve_id":"CVE-2024-47869","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47869","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:08:48.668Z","patch_url":"","primary_source":"","published":"2024-10-10T22:16:11.346Z"},{"affected":"< 5.0.0","affected_versions_present":true,"cve_id":"CVE-2024-47870","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47870","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:17:49.588Z","patch_url":"","primary_source":"","published":"2024-10-10T22:15:05.594Z"},{"affected":"< 5.0.0","affected_versions_present":true,"cve_id":"CVE-2024-47871","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47871","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:19:21.129Z","patch_url":"","primary_source":"","published":"2024-10-10T22:14:00.923Z"},{"affected":"< 5.0","affected_versions_present":true,"cve_id":"CVE-2024-47872","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47872","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:21:05.031Z","patch_url":"","primary_source":"","published":"2024-10-10T22:12:27.305Z"},{"affected":"< 4.44","affected_versions_present":true,"cve_id":"CVE-2024-47084","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47084","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:24:05.733Z","patch_url":"https://github.com/gradio-app/gradio/security/advisories/GHSA-3c67-5hwx-f6wx","primary_source":"","published":"2024-10-10T21:53:51.940Z"},{"affected":"< 5.0","affected_versions_present":true,"cve_id":"CVE-2024-47164","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47164","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:24:48.863Z","patch_url":"","primary_source":"","published":"2024-10-10T21:52:27.377Z"},{"affected":"< 5.0","affected_versions_present":true,"cve_id":"CVE-2024-47165","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47165","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:26:04.717Z","patch_url":"","primary_source":"","published":"2024-10-10T21:50:08.186Z"},{"affected":"< 4.44","affected_versions_present":true,"cve_id":"CVE-2024-47166","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47166","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:26:41.421Z","patch_url":"","primary_source":"","published":"2024-10-10T21:48:54.416Z"},{"affected":"< 5.0","affected_versions_present":true,"cve_id":"CVE-2024-47167","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47167","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:27:37.782Z","patch_url":"","primary_source":"","published":"2024-10-10T21:47:29.389Z"},{"affected":"< 4.44","affected_versions_present":true,"cve_id":"CVE-2024-47168","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-47168","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-11T15:28:22.945Z","patch_url":"","primary_source":"","published":"2024-10-10T21:44:51.114Z"},{"affected":"< 4.11.0","affected_versions_present":true,"cve_id":"CVE-2023-51449","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-51449","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-02T22:32:09.953Z","patch_url":"https://github.com/gradio-app/gradio/commit/1b9d4234d6c25ef250d882c7b90e1f4039ed2d76","primary_source":"","published":"2023-12-22T20:58:36.185Z"},{"affected":"< 3.34.0","affected_versions_present":true,"cve_id":"CVE-2023-34239","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-34239","fixed":"3.34.0.","last_modified":"2025-01-06T20:33:11.589Z","patch_url":"https://github.com/gradio-app/gradio/pull/4370","primary_source":"","published":"2023-06-07T23:20:06.549Z"},{"affected":"< 3.13.1","affected_versions_present":true,"cve_id":"CVE-2023-25823","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-25823","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-10T21:06:29.065Z","patch_url":"","primary_source":"","published":"2023-02-23T21:34:33.129Z"},{"affected":"< 2.8.11","affected_versions_present":true,"cve_id":"CVE-2022-24770","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-24770","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2025-04-23T18:46:31.781Z","patch_url":"https://github.com/gradio-app/gradio/pull/817","primary_source":"","published":"2022-03-17T20:30:19.000Z"},{"affected":"< 2.5.0","affected_versions_present":true,"cve_id":"CVE-2021-43831","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-43831","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-04T04:10:15.716Z","patch_url":"https://github.com/gradio-app/gradio/commit/41bd3645bdb616e1248b2167ca83636a2653f781","primary_source":"","published":"2021-12-15T19:50:10.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"gradio-app"}}