{"id":"CVE-2023-41626","details":"Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.","aliases":["GHSA-v4q9-qgqf-7jwp","PYSEC-2026-1422"],"modified":"2026-08-12T03:30:38.051142233Z","published":"2023-09-15T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41626.json"},"references":[{"type":"WEB","url":"https://gist.github.com/impose1/590472eb0544ef1ec36c8a5a40122adb"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41626.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41626"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gradio-app/gradio","events":[{"introduced":"35507fd258f11a815b8954c73940e5dd347113ec"},{"last_affected":"35507fd258f11a815b8954c73940e5dd347113ec"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:gradio_project:gradio:3.27.0:*:*:*:*:python:*:*","extracted_events":[{"introduced":"3.27.0"},{"last_affected":"3.27.0"}]}}],"versions":["3.27.0","v3.27.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-41626.json"}}],"schema_version":"1.9.0"}