AUTOMATIC1111 stable-diffusion-webui

• CVE-2026-111987 Medium 4.3 AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting 0.4%
• CVE-2026-111986 Medium 6.3 AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection 0.3%
• CVE-2026-111985 Medium 4.3 AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources 0.4%
• CVE-2026-111984 Medium 4.3 AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting 0.4%
• CVE-2026-82288 High 7.5 Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags 0.4%
• CVE-2024-31462 Medium 6.3 Limited file write in Stable-diffusion-webui - GHSL-2024-010 0.7%