ComfyUI-Bmad-Nodes vulnerabilities
1 known vulnerability in ComfyUI-Bmad-Nodes from Bmad4ever. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest first
- 10.0 Critical severity
ComfyUI-Bmad-Nodes: Improper Control of Generation of Code
ComfyUI-Bmad-Nodes is vulnerable to Code Injection. The issue stems from a validation bypass in the BuildColorRangeHSVAdvanced, FilterContour and FindContour custom nodes. In the entrypoint function to each node, there’s a call to eval which can be triggered b