ComfyUI
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 12, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitization
ComfyUI View Endpoint server.py cross site scripting
ComfyUI userdata Endpoint user_manager.py getuserdata cross site scripting
ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal
ComfyUI Model Preview Endpoint model_manager.py get_model_preview path traversal
ComfyUI server.py create_origin_only_middleware cross-site request forgery
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
Monitor ComfyUI in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.