EUVD-2026-103507

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111987

A Cross-Site Scripting (XSS) vulnerability exists in AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1 . The flaw is located within the Extra-Networks Card Builder component, specifically in the read_metadata_from_safetensors function of the modules/sd_models.py file. An attacker can trig...

CVE-2026-111984

The AUTOMATIC1111 stable-diffusion-webui software (up to version 1.10.1 ) contains a cross-site scripting (XSS) vulnerability within the Card Builder component. The flaw exists in the create_item_html function located in the modules/ui_extra_networks.py file, where improper handling of the filena...

EUVD-2026-103475

A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function createitemhtml of the file modules/uiextranetworks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate t...