gitsafehub
github.com/automatic1111/stable-diffusion-webui ↗

automatic1111/stable-diffusion-webui

scanned 2026-07-16 · git 82a973c
2 of 6 checks flagged a security issue
🔴 Needs attention
Only 4 of 6 checks finished — treat this as provisional. Re-check ↻

Informational scan, not a security audit. How this is computed.

Leaked secrets—Vulnerable dependencies54Known OSS vulnerabilities181Risky code patterns✓Malicious dependencies—Project health11

Security checks

Leaked secrets — Gitleaksⓘ timed out

API keys, passwords or tokens committed into the repo.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Gitleaks v8.21.2 · MIT

error: timeout after 400s

Vulnerable dependencies — Trivyⓘ 54 found · 4 serious

Packages you depend on that have known security holes (CVEs).

  • Serious CVE-2023-6572 Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-6572). Fix: Update that package to its patched version.
  • Serious CVE-2024-1728 Gradio allows users to access arbitrary files
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-1728). Fix: Update that package to its patched version.
  • Serious CVE-2025-23042 Gradio Blocked Path ACL Bypass Vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2025-23042). Fix: Update that package to its patched version.
  • Serious CVE-2023-6730 transformers has a Deserialization of Untrusted Data vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
  • Worth fixing CVE-2023-51449 Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
    requirements.txt
    A package you depend on has a known security hole (CVE-2023-51449). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-0964 Gradio Path Traversal vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-0964). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-1561 gradio vulnerable to Path Traversal
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-1561). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-2206 gradio Server-Side Request Forgery vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-2206). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-34510 Gradio allows credential leakage on Windows
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-34510). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47084 Gradios's CORS origin validation is not performed when the request has a cookie
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47084). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47867 Gradio lacks integrity checking on the downloaded FRP client
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47867). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47870 Gradio has a race condition in update_root_in_config may redirect user traffic
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47870). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47871 Gradio uses insecure communication between the FRP client and server
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47871). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-4941 Local file inclusion in gradio
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-4941). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-28414 Gradio is Vulnerable to Absolute Path Traversal on Windows with Python 3.13+
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-28414). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-28416 Gradio: Gradio: Server-Side Request Forgery allows access to internal services via malicious Space loading
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-28416). Fix: Update that package to its patched version.
  • Worth fixing CVE-2026-48545 Gradio contains a cookie injection vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2026-48545). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-1183 gradio Server-Side Request Forgery vulnerability
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-1183). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-1727 Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-1727). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-1729 Gradio apps vulnerable to timing attacks to guess password
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-1729). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47164 Gradio's `is_in_or_equal` function may be bypassed
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47164). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47165 Gradio's CORS origin validation accepts the null origin
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47165). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47166 Gradio has a one-level read path traversal in `/custom_component`
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47166). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47167 Gradio vulnerable to SSRF in the path parameter of /queue/join
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47167). Fix: Update that package to its patched version.
  • Worth fixing CVE-2024-47868 Gradio has several components with post-process steps allow arbitrary file leaks
    requirements.txt
    A package you depend on has a known security hole (CVE-2024-47868). Fix: Update that package to its patched version.
… 29 more not shown

via Trivy v0.70.0 · Apache-2.0

Known OSS vulnerabilities — OSV-Scannerⓘ 181 found · 21 serious

Your dependencies cross-checked against the OSV vulnerability database.

  • Serious PYSEC-2023-255 Command Injection in GitHub repository gradio-app/gradio prior to main.
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2023-6572). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-215 Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2024-47167). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-219 Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **insecure communication** between the FRP (Fast Reverse Proxy) client and server when Gradio's `sha
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2024-47871). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-274 Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes th
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2024-39236). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-321 A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2024-4253). Fix: Update that package to its patched version.
  • Serious PYSEC-2025-118 Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) f
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2025-23042). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-345 Gradio allows users to access arbitrary files
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2024-1728). Fix: Update that package to its patched version.
  • Serious PYSEC-2023-300 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-2290 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements.txt
    A package you depend on has a known security hole (CVE-2026-5241). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-2161 GitPython is a python library used to interact with Git repositories. Prior to version 3.1.47, _clone() validates multi_options as the original list, then executes shlex.split(" ".join(multi_options))
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2026-42284). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-457 Arbitrary Code Execution in Pillow
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2023-50447). Fix: Update that package to its patched version.
  • Serious PYSEC-2023-255 Command Injection in GitHub repository gradio-app/gradio prior to main.
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2023-6572). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-215 Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2024-47167). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-219 Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **insecure communication** between the FRP (Fast Reverse Proxy) client and server when Gradio's `sha
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2024-47871). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-274 Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes th
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2024-39236). Fix: Update that package to its patched version.
  • Serious PYSEC-2024-321 A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2024-4253). Fix: Update that package to its patched version.
  • Serious PYSEC-2025-118 Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) f
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2025-23042). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-345 Gradio allows users to access arbitrary files
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2024-1728). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-507 PyTorch Lightning path traversal vulnerability
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2024-8019). Fix: Update that package to its patched version.
  • Serious PYSEC-2023-300 Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2023-6730). Fix: Update that package to its patched version.
  • Serious PYSEC-2026-2290 A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization. The
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements_versions.txt
    A package you depend on has a known security hole (CVE-2026-5241). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1845 pytest has vulnerable tmpdir handling
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements-test.txt
    A package you depend on has a known security hole (CVE-2025-71176). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2018-28 The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to dis
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements-test.txt
    A package you depend on has a known security hole (CVE-2018-18074). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2023-74 Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `re
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements-test.txt
    A package you depend on has a known security hole (CVE-2023-32681). Fix: Update that package to its patched version.
  • Worth fixing PYSEC-2026-1872 Requests vulnerable to .netrc credentials leak via malicious URLs
    /workdirs/scan-7ad31ee0-cf0b-4406-bf10-bd2f500b5c15/requirements-test.txt
    A package you depend on has a known security hole (CVE-2024-47081). Fix: Update that package to its patched version.
… 156 more not shown

via OSV-Scanner v1.9.2 · Apache-2.0

Risky code patterns — Semgrepⓘ none found ✓

Code that can be exploited: injection, hardcoded credentials and similar.

Nothing found by this check. ✓

via Semgrep v1.147.0 · LGPL-2.1

Malicious dependencies — Guarddogⓘ timed out

Packages that look intentionally malicious: typosquats, sneaky install scripts.

This check didn’t finish — that’s not the same as “clean.” Try Check again above.

via Guarddog v2.10.0 · Apache-2.0

error: pypi:timeout

Project health

A signal about how the project is maintained — not a vulnerability in your code. It doesn’t affect the verdict above.

Project health — OpenSSF Scorecardⓘ 11 notes

Maintenance & supply-chain hygiene. A signal about the project, not a vulnerability in your code.

  • Worth fixing scorecard-overall OpenSSF Scorecard overall: 3.2/10
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-CI-Tests CI-Tests scored 0: 0 out of 12 merged PRs checked by a CI test -- score normalized to 0
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-CII-Best-Practices CII-Best-Practices scored 0: no effort to earn an OpenSSF best practices badge detected
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Dependency-Update-Tool Dependency-Update-Tool scored 0: no update tool detected
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Fuzzing Fuzzing scored 0: project is not fuzzed
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Maintained Maintained scored 0: 0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Pinned-Dependencies Pinned-Dependencies scored 0: dependency not pinned by hash detected -- score normalized to 0
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-SAST SAST scored 0: SAST tool is not run on all commits -- score normalized to 0
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Security-Policy Security-Policy scored 0: security policy file not detected
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Signed-Releases Signed-Releases scored 0: Project has not signed or included provenance with any releases.
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.
  • Minor scorecard-Token-Permissions Token-Permissions scored 0: detected GitHub workflow tokens with excessive permissions
    A project-health signal (maintenance / supply-chain hygiene), not a vulnerability in your code.

via OpenSSF Scorecard v5.5.0 · Apache-2.0

About these results. Six open-source checks ran in parallel; every finding is tagged with the tool that produced it. The verdict follows a published rule. False positives and false negatives are normal — a clean scan does not mean the code is secure, and a red verdict does not mean the project is compromised.