comfyanonymous

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

comfyanonymous records in CISA KEV

No comfyanonymous vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Comfyui · all components

TI-2024-11938 CVE-2024-12882 · GHSA-56p4-cfqw-jx4h

HIGH 72

comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00767 Published 2025-03-20 No fix listed CWE-918

TI-2024-09709 CVE-2024-10481 · GHSA-h9jx-rcv4-cgqg

MEDIUM 62

A CSRF vulnerability exists in comfyanonymous/comfyui versions up to v0.2.2.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00225 Published 2025-03-20 No fix listed CWE-352

TI-2024-09361 CVE-2024-10099 · GHSA-5269-hjm8-7x5f

MEDIUM 60

A stored cross-site scripting (XSS) vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00373 Published 2024-10-17 No fix listed CWE-79