comfyui-0.33.3-1.1 on GA media (moderate)

comfyui-0.33.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11562-1 Rating: moderate Cross-References: CVE-2026-56670 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the comfyui-0.33.3-1....

CVE-2026-56670

CVE-2026-56670 : ComfyUI’s /view endpoint allowed stored XSS via uploaded SVG files prior to version 0.28.0 because image/svg+xml and related XML content types were not treated as dangerous content. The issue enabled inline serving of uploaded SVGs, permitting script execution in the ComfyUI orig...