Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

comfy-cli

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
1.25.0 (Nov 3, 2026): affected by CVE-2026-22777
Newest unaffected release
Every release is affected by at least one advisory
Advisories
1 · 1 high
Weekly downloads
25K
Dependents
1
Releases
104 since 0.0.8 (May 2, 2024)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

    Affected: from 4.0.0, fixed in 4.0.5; fixed in 3.39.2; fixed in 3.39.2; from 4.0.0, fixed in 4.0.5.

    No fix released. The advisory names 3.39.2 and 4.0.5 as the fix, which the registry doesn't have yet. The latest release, 1.25.0, is still affected.