Executive brief
Gradio apps vulnerable to timing attacks to guess password
Affected products
- PyPI gradio
Junglewise Threat Intelligence
CVE-2024-1729: PYSEC-2026-1416 - Gradio apps vulnerable to timing attacks to guess password
CVE-2024-1729 · Severity: low · CVSS 3 · Published 2026-07-07
Technologies: gradio (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1423 - Gradio CORS Origin Validation Bypass Vulnerability
- PYSEC-2026-1410 - Gradio DOS in multipart boundry while uploading the file
- PYSEC-2026-1411 - Gradio Vulnerable to Open Redirect
- PYSEC-2026-1418 - Gradio Path Traversal vulnerability
- PYSEC-2026-1417 - Gradio Vulnerable to Arbitrary File Deletion