Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

gradio-app/gradio

              main @ ec64242
            

127

Fixes

CVEs

CRITICAL

Peak severity

37.1%

Coverage

Highlights

Denial of Service: 30 prior fixes. Scrutinize any change in this area.

gradio/routes.py: most-fixed (43 issues). Treat as high-risk during review.

63 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Path Traversal: Insecure file serving and deep-linking state resolution pathways allow unauthenticated attackers to escape jail directories and read arbitrary host files, particularly on Windows environments with complex absolute paths. This is a highly recurring issue across many historical releases.

Auth Bypass: Shared module-level HTTP clients and incorrect cookie isolation across reverse-proxied Spaces permit cross-Space session fixation, credential leaks, and authentication bypasses on configuration endpoints.

SSRF: Insufficently validated URL inputs used during postprocessing of components like Image, Gallery, and Audio allow attackers to trigger outbound requests to internal services or arbitrary remote hosts.