Gradio before 4.20 allows credential leakage on Windows.
The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.
Link | Tags |
---|---|
https://github.com/gradio-app/gradio/ | product |
https://www.gradio.app/changelog#4-20-0 | release notes |