What’s Vulnerable › Products

comfyanonymous/comfyui vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your comfyanonymous/comfyui version is affected

Latest comfyanonymous/comfyui vulnerabilities

• CVE-2025-6107 — comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes (CVSS 3.1)
• CVE-2025-6092 — comfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting (CVSS 4.3)
• CVE-2024-12882 — SSRF in comfyanonymous/comfyui (CVSS 7.5)
• CVE-2024-10481 — Cross-Site Request Forgery (CSRF) in comfyanonymous/comfyui (CVSS 6.5)
• CVE-2024-10099 — Stored XSS in comfyanonymous/comfyui (CVSS 6.1)