Skip to content
iPatch
Search CVEs, vendors, products
/
Log in
Start free
Today
Exploited tracker
Weekly brief
Vendors
How it works
Trust
Pricing
Vendors
/
ltdrdata
/
ComfyUI-Manager
ltdrdata ComfyUI-Manager
CVE-2024-21574
Critical
10.0
The issue stems from a missing validation of the pip field in a POST request sent to the /customnode/install endpoint used to install custom nodes which is added to the server by the extension. This a
1.1%