Filtered by vendor Nikolaibibo
Subscriptions
Filtered by product Claude-comfyui-mcp
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-19371 | 1 Nikolaibibo | 1 Claude-comfyui-mcp | 2026-08-09 | 5.3 Medium |
| A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet. | ||||
Page 1 of 1.