PT-2026-66677

Name of the Vulnerable Software and Affected Versions ComfyUI versions prior to 0.28.0 Description The /view endpoint serves uploaded SVG files inline due to the absence of image/svg+xml and related XML content types from the dangerous-content-type handling. This allows for stored cross-site...