Comfy Comfyui
3 CVEs affecting Comfy Comfyui. Latest disclosed: 2025-03-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12882 | High | 7.5 | 2025-03-20 | comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. This vulnerability can be exploited by combini… |
CVE-2024-10481 | Medium | 6.5 | 2025-03-20 | A CSRF vulnerability exists in comfyanonymous/comfyui versions up to v0.2.2. This vulnerability allows attackers to host malicious websites that, when visited… |
CVE-2024-10099 | Medium | 6.1 | 2024-10-17 | A stored cross-site scripting (XSS) vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. The vulnerability occurs when an attacke… |