Advisories · Technology
ComfyUI.
Every CVE that names ComfyUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
ComfyUI View Endpoint server.py cross site scripting
- ComfyUI
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
ComfyUI userdata Endpoint user_manager.py getuserdata cross site scripting
- ComfyUI
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal
- ComfyUI
- Path traversal
- CVSS 5.3 Medium
ComfyUI Model Preview Endpoint model_manager.py get_model_preview path traversal
- ComfyUI
- Path traversal
- CVSS 5.3 Medium
ComfyUI server.py create_origin_only_middleware cross-site request forgery
- ComfyUI
- Cross-site request forgery (CSRF)
- Broken access control