Skip to content
Auditing Gradio 5, Hugging Face’s ML GUI framework
blog.trailofbits.com | blog | #security-audit | #xss | #ssrf | #machine-learning | #gradio | #hugging-face
Summary
Trail of Bits audited Hugging Face's Gradio 5, finding eight high-severity issues including SSRF, XSS, and arbitrary file leaks; all were fixed before the framework's October 2024 release.
- Published
- Collected