comfy records

5 published records for vendor comfy.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2025-67303Proof of concept	An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data.comfy · comfyui-manager · CWE-420 Pre-auth	High7.5	—	1.4%	Jan 5, 2026
30Monitor	CVE-2024-12882No exploit	SSRF in comfyanonymous/comfyuicomfy · comfyui · CWE-918 Pre-auth SSRF	High7.5	—	0.8%	Mar 20, 2025
30Monitor	CVE-2026-22777Proof of concept	ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handlercomfy · comfyui-manager · CWE-93 Pre-auth	High7.5	—	0.3%	Jan 10, 2026
26Monitor	CVE-2024-10481No exploit	Cross-Site Request Forgery (CSRF) in comfyanonymous/comfyuicomfy · comfyui · CWE-352 Pre-auth XSS CSRF	Medium6.5	—	0.2%	Mar 20, 2025
24Monitor	CVE-2024-10099No exploit	Stored XSS in comfyanonymous/comfyuicomfy · comfyui · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Oct 17, 2024

CVE-2025-67303
30Monitor
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data.
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
comfy · comfyui-managerJan 5, 2026
CVE-2024-12882
30Monitor
SSRF in comfyanonymous/comfyui
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SSRF
comfy · comfyuiMar 20, 2025
CVE-2026-22777
30Monitor
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
comfy · comfyui-managerJan 10, 2026
CVE-2024-10481
26Monitor
Cross-Site Request Forgery (CSRF) in comfyanonymous/comfyui
MediumCVSS 6.5No exploitEPSS 0%
comfy · comfyuiMar 20, 2025
CVE-2024-10099
24Monitor
Stored XSS in comfyanonymous/comfyui
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
comfy · comfyuiOct 17, 2024