[GHSA-j36p-7w88-g82j] Gradio before 6.16.0 contain a path traversal...

[PercevalFox]

Updates

• Affected products
• CVSS v3
• CVSS v4
• Summary

Comments
This advisory is unreviewed and has no package mapping, so it does not surface to users of the affected package.

The repository gradio-app/gradio publishes the PyPI package gradio (PyPI project metadata links back to the same repository).

I verified the boundary against the published PyPI wheels. In gradio/components/file_explorer.py, the preprocess() method:

• 6.10.0 through 6.15.2 build the path with os.path.join(self.root_dir, *segments) on caller-controlled segments, so an absolute path or a traversal sequence escapes root_dir
• 6.16.0 onward route the same segments through a _safe_join() helper

I checked the 6.1x release line; the transition occurs exactly once, at 6.16.0. This matches the "before 6.16.0" wording in the description and the release tag already listed in the references (https://github.com/gradio-app/gradio/releases/tag/gradio%406.16.0).

Note: gradio is a monorepo and tags its Python releases as gradio@X.Y.Z; the underlying PyPI version is X.Y.Z.

Proposed range: introduced 0, fixed 6.16.0.

The CVSS v4 vector was rewritten to omit the trailing Not Defined (X) metrics, which the form's validator rejects. Semantically identical per the CVSS v4.0 spec, same score (8.7 / High), no change to severity. CVSS v3 left untouched.

The advisory also had no title. The proposed one follows the database's naming convention and reflects the existing CWE-22 classification.