{"data":{"id":"bc48a43d-e81b-4505-8eff-33d89efae789","title":"CVE-2024-10624: A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the…","summary":"CVE-2024-10624 is a Regular Expression Denial of Service (ReDoS) flaw in the gr.Datetime component of the gradio-app/gradio repository, affecting git commit 98cbcae. The component applies the regex ^(?:\\s*now\\s*(?:-\\s*(\\d+)\\s*([dmhs]))?)?\\s*$ to user input, and in Python's default regex engine certain crafted inputs take polynomial time to match. An attacker can send a crafted HTTP request to drive the gradio process to 100% CPU, potentially causing a Denial of Service on the server.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-10624","publishedAt":"2025-03-20T14:15:17.880Z","cveId":"CVE-2024-10624","cweIds":["CWE-1333"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["gradio@>= 4.38.0, <= 5.0.0-beta.2"],"affectedPackageNames":["gradio"],"affectedPackageRefs":["pypi:gradio"],"affectedVendors":[],"affectedVendorsRaw":["Gradio"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"gradio Datetime component ReDoS via crafted HTTP request","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01099,"epssCheckedAt":"2026-11-04T18:09:12.821Z","kevDateAdded":null,"advisoryAliases":["GHSA-rvgh-pr46-x7gg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:23.587Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}