1 matches found
CVE-2026-22777: Improper Neutralization of CRLF Sequences
ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or...
7.5CVSS5.8AI score0.00347EPSS
SaveExploits1References1
20