ComfyUI
v0.45.0The most powerful and modular diffusion model GUI, api and backend with a graph/nodes interface. The fastest local inference engine in the world.
- Maintenance
- Active531 commits in 3 months · bus factor 1
- License
- GPL-3.0Copyleft · OSI-approved
- Security
- 4 advisories4 high
- Supported versions
- No scheduleendoflife.date does not track this project
147k stars · 17.5k forks · 5.5k open issues · last release 4 days ago · data checked 42 minutes ago
Security advisories
All advisories on GitHubThe 4 most recent advisories published by the maintainers: 4 high. Check the patched version against the one you run.
- highCVE-2026-56673Jul 15, 2026Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration
- Affected
- < 0.28.0
- Patched in
- 0.28.0
- highCVE-2026-56672Jul 15, 2026Stored XSS via /userdata/{file} due to missing Content-Type sanitization
- Affected
- < 0.28.0
- Patched in
- 0.28.0
- highCVE-2026-56671Jul 15, 2026Path traversal in /experiment/models/preview allows arbitrary image file read
- Affected
- < 0.28.0
- Patched in
- 0.28.0
- highCVE-2026-56670Jul 15, 2026Stored XSS via SVG file upload on the /view endpoint
- Affected
- < 0.28.0
- Patched in
- 0.28.0