Auditing Gradio 5, Hugging Face

Summary: Hugging Face hired Trail of Bits to audit Gradio 5, a machine learning web interface library with more than 6.1 million monthly PyPI downloads, and the review uncovered eight high-severity issues before the October 9, 2024 release. The findings included SSRF, XSS, and arbitrary file leaks in specific server configurations, plus two high-severity issues in the sharing infrastructure that uses an frp tunnel, and Trail of Bits says all reported issues were sufficiently addressed after a post-audit fix review.
What's compelling: Gradio is the engine behind Stable-diffusion-webui (141k GitHub stars) and text-generation-webui (40k stars), so flaws in its sharing tunnel reached a large installed base, and anyone still on an older version is told to run pip install --upgrade gradio.

Read the original at Trail of Bits Blog ↗