184 matches found
PT-2026-2261
Name of the Vulnerable Software and Affected Versions ComfyUI-Manager versions prior to 3.39.2 ComfyUI-Manager versions prior to 4.0.5 Description ComfyUI-Manager, an extension for ComfyUI, is susceptible to arbitrary configuration injection. An attacker can inject special characters into HTTP...
ComfyUI-Manager CRLF Injection Vulnerability
ComfyUI is a popular node-based Stable Diffusion GUI widely used for building and executing AI image generation workflows.ComfyUI-Manager is an extension manager plugin for ComfyUI to simplify the management of installations of custom nodes, models and dependencies. ComfyUI-Manager suffers from a...
GHSA-2HC9-CC65-XWJ8 Duplicate Advisory: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-95pq-hr8p-f5g7. This link is maintained to preserve external references. Original Description An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuratio...
CVE-2025-67303
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface...
CVE-2025-67303
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface...
CVE-2025-67303
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface...
ComfyUI-Manager 安全漏洞
ComfyUI-Manager is an extension from the individual developers of Dr.Lt.Data designed to enhance the usability of ComfyUI. A security vulnerability exists in ComfyUI-Manager versions prior to 3.38, which stems from insufficient protection of the file storage location and could lead to manipulatio...
PT-2026-1293
Name of the Vulnerable Software and Affected Versions ComfyUI-Manager versions prior to 3.38 Description An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in a...
CVE-2025-67303
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface...
CVE-2025-67303
ComfyUI-Manager
EUVD-2024-32903
Malicious code in bioql PyPI...
EUVD-2025-18919
Malicious code in bioql PyPI...
EUVD-2024-19226
Malicious code in bioql PyPI...
EUVD-2025-18364
Malicious code in bioql PyPI...
EUVD-2024-47724
Malicious code in bioql PyPI...
EUVD-2025-7106
Malicious code in bioql PyPI...
EUVD-2024-19224
Malicious code in bioql PyPI...
EUVD-2025-18346
Malicious code in bioql PyPI...
CVE-2025-6107
A vulnerability was found in comfyanonymous comfyui 0.3.40. It has been classified as problematic. Affected is the function setattr of the file /comfy/utils.py. The manipulation leads to dynamically-determined object attributes. It is possible to launch the attack remotely. The complexity of an...
CVE-2025-6092
A vulnerability was found in comfyanonymous comfyui up to 0.3.39. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /upload/image of the component Incomplete Fix CVE-2024-10099. The manipulation of the argument image leads to cross site...