CVE-2024-34511

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 4.13

Description The issue arises from the Component Server in Gradio not properly considering is server fn for functions. This can lead to security risks if function calls do not take is server fn into account.

Recommendations For Gradio versions prior to 4.13, update to version 4.13 or later to resolve the issue. As a temporary workaround, consider ensuring that all function calls properly consider the is server fn variable to minimize the risk of exploitation.