CO
Product
ComfyUI-Manager
by ltdrdata · last CVE Dec 12, 2024
1
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add ComfyUI-Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-21574
10.0
1%
Dec 12
The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by…
Affected: before 2.51.1
Showing 1