CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
2 CVEs tagged to comfy / comfyui-manager — 0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.
ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query paramet…
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing i…