CVE-2026-108962

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

CVE-2026-108962 storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file2dict code injection

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

EUVD-2026-98277

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

CVE-2026-108962 storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig._file2dict code injection

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

CVE-2026-108962

A code injection vulnerability exists in the storyicon comfyui_segment_anything project, specifically within the GroundingDINO Model Loading component. The issue is located in the SLConfig._file2dict function of the local_groundingdino/util/slconfig.py file, where manipulation of the config argum...

PT-2026-111275

Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...

CVE-2026-108962: Improper Control of Generation of Code

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

StoryIcon ComfyUI Segment Anything input validation error vulnerability

A security vulnerability exists in storyicon ComfyUI Segment Anything. It stems from improper handling of the ‘config’ parameter by the SLConfig.file2dict function within the localgroundingdino/util/slconfig.py file in the GroundingDINO Model Loading component. This may lead to code injection,...