Comfy-org Comfyui vulnerabilities
- comfy-org comfyui ComfyUI before 0.30.0 Path Traversal via dataset save nodes 8.5 High
- comfy-org comfyui ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization 9.3 Critical
- comfy-org comfyui ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration 7.5 High
- comfy-org comfyui ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitization 8.2 High
- comfy-org comfyui ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read 7.5 High
- comfy-org comfyui ComfyUI: Stored XSS via SVG file upload on the /view endpoint 8.2 High
- comfy comfyui-manager ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler 7.5 High
- comfy-org comfyui-manager The issue stems from a missing validation of the pip field in a POST request sent to the ... 10.0 Critical