CVE-2024-8966

HIGH7.5EPSS 0.29%

Gradio DOS in multipart boundry while uploading the file

Published: 3/20/2025Modified: 10/16/2025
Also known as:GHSA-5cpq-9538-jm2j

Description

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service (DoS) attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue warnings. This can render Gradio inaccessible for extended periods, disrupting services and causing significant downtime.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (4)