ST
Product
stable-diffusion-webui
12
CVEs
0
On KEV
9.6
Max CVSS
4
New 30D
Severity mix
Critical 1High 2Medium 9Low 0
Watch
Add stable-diffusion-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11045 | 9.6 | Mar 20 | Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui Affected: 1.10.0 |
| CVE-2026-82288 | 7.5 | Aug 28 | Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags Affected: through 1.10.1 |
| CVE-2024-10935 | 7.5 | Mar 20 | Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui Affected: 1.10.0 |
| CVE-2024-12074 | 6.5 | Mar 20 | Denial of Service in automatic1111/stable-diffusion-webui Affected: 1.10.0 |
| CVE-2024-12375 | 6.5 | Mar 20 | Local File Inclusion in automatic1111/stable-diffusion-webui Affected: 2024-07-27 |
| CVE-2026-111986 | 6.3 | Oct 18 | AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection Affected: 1.10.0; 1.10.1 |
| CVE-2024-31462 | 6.3 | Apr 12 | Limited file write in Stable-diffusion-webui - GHSL-2024-010 Affected: <= 1.8.0 |
| CVE-2024-11044 | 6.1 | Mar 20 | Open Redirect in automatic1111/stable-diffusion-webui Affected: 1.10.0 |
| CVE-2024-12374 | 6.1 | Mar 20 | Stored XSS in automatic1111/stable-diffusion-webui Affected: 2024-07-27 |
| CVE-2026-111987 | 4.3 | Oct 18 | AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting Affected: 1.10.0; 1.10.1 |
| CVE-2026-111985 | 4.3 | Oct 18 | AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources Affected: 1.10.0; 1.10.1 |
| CVE-2026-111984 | 4.3 | Oct 18 | AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting Affected: 1.10.0; 1.10.1 |
Showing 12