---
id: 1450
title: "Auditing Gradio 5, Hugging Face’s ML GUI framework"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/10/10/auditing-gradio-5-hugging-faces-ml-gui-framework/"
published_at: "2024-10-10 16:00"
tags: ["security-audit", "xss", "ssrf", "machine-learning", "gradio", "hugging-face"]
phying_url: "https://phying.com/item/1450"
lang: en
---

# Auditing Gradio 5, Hugging Face’s ML GUI framework

## Summary

Trail of Bits audited Hugging Face's Gradio 5, finding eight high-severity issues including SSRF, XSS, and arbitrary file leaks; all were fixed before the framework's October 2024 release.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-10-10 16:00
- **Original:** https://blog.trailofbits.com/2024/10/10/auditing-gradio-5-hugging-faces-ml-gui-framework/
- **Phying News:** https://phying.com/item/1450