CVE-2024-21577

ComfyUI-Ace-Nodes is vulnerable to Code Injection. The ACEExpressionEval node contains an eval in its entrypoint function that accepts arbitrary user-controlled data. A user can create a workflow that results in executing arbitrary code on the server...

CVE-2024-21577

ComfyUI-Ace-Nodes is vulnerable to Code Injection. The ACEExpressionEval node contains an eval in its entrypoint function that accepts arbitrary user-controlled data. A user can create a workflow that results in executing arbitrary code on the server...

CVE-2024-21577

The CVE-2024-21577 entry concerns ComfyUI-Ace-Nodes, where the ACE_ExpressionEval node exposes an eval() in its entrypoint, allowing an attacker-controlled input to execute arbitrary code on the server. The vulnerability arises from evaluating user-supplied data, enabling potential code injection...

CVE-2024-21577

ComfyUI-Ace-Nodes is vulnerable to Code Injection. The ACEExpressionEval node contains an eval in its entrypoint function that accepts arbitrary user-controlled data. A user can create a workflow that results in executing arbitrary code on the server...

CVE-2024-21577: Improper Control of Generation of Code

ComfyUI-Ace-Nodes is vulnerable to Code Injection. The ACEExpressionEval node contains an eval in its entrypoint function that accepts arbitrary user-controlled data. A user can create a workflow that results in executing arbitrary code on the server...

PT-2024-18968

Name of the Vulnerable Software and Affected Versions ComfyUI-Ace-Nodes affected versions not specified Description The issue concerns a Code Injection vulnerability. The ACE ExpressionEval node in ComfyUI-Ace-Nodes contains an eval function in its entrypoint that accepts arbitrary user-controlle...