Tools / ComfyUI / Security

Security Deep Dive

ComfyUI

Security posture and CVE patch evidence from tracked releases.

Back to Tool

1 actively-exploited dependency CVE affects v0.24.0.

KEV-listed CVEs are confirmed exploited in the wild — patch urgently.

Versions by Severity

CVEs are attributed to tracked releases published before the patch release.

20 versions tracked

Version	Published	C	H	M	L	KEV	Notes
v0.24.0	2026-06-03	—	—	—	—	—	Latest
v0.23.0	2026-06-01	—	—	—	—	—	—
v0.22.0	2026-05-20	—	—	—	—	—	—
v0.21.1	2026-05-13	—	—	—	—	—	—
v0.21.0	2026-05-11	—	—	—	—	—	Patches CVE-2023-4863
v0.20.1	2026-04-27	—	1	—	—	KEV 1	—
v0.19.3	2026-04-17	—	1	—	—	KEV 1	—
v0.19.2	2026-04-17	—	1	—	—	KEV 1	—
v0.19.1	2026-04-16	—	1	—	—	KEV 1	—
v0.19.0	2026-04-13	—	1	—	—	KEV 1	—
v0.18.2	2026-03-25	—	1	—	—	KEV 1	—
v0.18.1	2026-03-23	—	1	—	—	KEV 1	—
v0.18.0	2026-03-21	—	1	—	—	KEV 1	—
v0.17.2	2026-03-15	—	1	—	—	KEV 1	—
v0.17.1	2026-03-13	—	1	—	—	KEV 1	—
v0.17.0	2026-03-13	—	1	—	—	KEV 1	—
v0.16.4	2026-03-07	—	1	—	—	KEV 1	—
v0.16.3	2026-03-05	—	1	—	—	KEV 1	—
v0.16.2	2026-03-05	—	1	—	—	KEV 1	—
v0.16.1	2026-03-05	—	1	—	—	KEV 1	—

— Signed — SLSA — SBOM ✗ Security policy Weekly cadence · 3d median Active maintainer

Trust Signals — 2 of 9 Present

Evidence already collected from releases and repository metadata.

2/9 Present

Signed releases Unknown

Latest release artifact signature Latest release

—

SLSA provenance Unknown

Attestation predicate level Latest release

—

SBOM published Unknown

GitHub SBOM API Latest release

—

SECURITY.md Absent

GitHub repository metadata Repository policy

Checked: 23d ago

Release cadence: weekly Present

3d median over recent releases Release history

Latest release: today

Maintainer active Present

Recent commit activity Repository

Last commit: 1d ago

Checksums (SHA256SUMS) Not active yet

SHA256SUMS or equivalent Release asset

Latest release: today

GitHub Actions attestation Not active yet

actions/attest-build-provenance Workflow file

Latest release: today

Signing assets Not active yet

.sig, .crt, cosign.pub, or similar Release asset

Latest release: today

0.5/10 Security Score

Dependency Exposure 163 transitive dependency CVEs found in the latest SBOM. 22 critical.

Security Score

A composite score aggregating Scorecard performance, CVE patch history, OpenSSF badge tier, and dependency vulnerability exposure. Score ≥ 7.0 is healthy; < 4.0 warrants attention.

epss

0.00 / 0.5

Max EPSS 0.933

freshness

1.00 / 1.0

1d stale

scorecard

2.00 / 4.0

⚠ Estimated — not yet collected

cve health

0.00 / 2.5

No open CVEs

patch speed

0.50 / 0.5

⚠ Estimated — no CVE patch history

kev exposure

-1.50 / 1.5

KEV exposure detected

supply chain risk

-1.50 / 10.0

Risk 100.0/100

Score breakdown

schema v2

Vulnerability posture

vulnerability posture

0.0

25%

direct cves: clear cve scan: available

Release responsiveness

release responsiveness

10.0

patch speed days: no_history

Dependency exposure

dependency exposure

0.0

10%

supply chain risk: 100.0 transitive cves: 22c/59h

Provenance trust

provenance trust

5.0

40%

scorecard score: estimated openssf badge: none

Maintainer health

maintainer health

10.0

10%

activity freshness: 1d

Operational risk

operational risk

0.0

10%

kev exposure: detected epss max: 0.933

How is this calculated?

The six dimensions group the legacy score signals into weighted categories: direct vulnerability status, patch responsiveness, dependency exposure, provenance checks, maintainer activity, and exploitability risk. The flat component values above remain available for compatibility.

Supply Chain Risk

Risk 100.0/100

22 Transitive critical CVEs

1 KEV-transitive CVEs

91% Dependency freshness

OpenSSF Badge

OpenSSF none

Badge indicates adherence to open-source best practices.

CVE Patch History

Tracks CVEs that were addressed in tagged releases. Shorter gap between disclosure and patch = faster response. EPSS = predicted probability of exploitation in next 30 days (FIRST.org); colored at ≥90%ile and ≥50%ile.

CVEs Patched by Year

Critical High Medium Low

2026

CVE	Severity	EPSS	Disclosed	Fixed in	Days to fix	vs Ecosystem Median	KEV
CVE-2023-4863	HIGH	99%ile	—	v0.21.0	—	—	KEV

KEV = CISA Known Exploited Vulnerabilities catalog — actively exploited in the wild.

Dependency Vulnerabilities

62 dependencies scanned View full dependency list →

Scanning the SBOM (Software Bill of Materials) of the latest release for known vulnerabilities in transitive dependencies.

Critical

High

Medium

Low

Unknown

1 dependency vulnerabilities are in KEV.

CISA confirmed these vulnerabilities are actively exploited. Treat as critical priority.

Still affecting latest (0) All (163)

Critical 22 High 59 Medium 58 Low 18 Unknown 6

CVE	Severity	KEV	Dependency	Affected version	Cleared in release
CVE-2012-0805	critical	—	sqlalchemy	—	v0.21.0
CVE-2014-3007	critical	—	pillow	—	v0.21.0
CVE-2016-4009	critical	—	pillow	—	v0.21.0
CVE-2017-18342	critical	—	pyyaml	—	v0.21.0
CVE-2019-20477	critical	—	pyyaml	—	v0.21.0
CVE-2019-6446	critical	—	numpy	—	v0.21.0
CVE-2019-7164	critical	—	sqlalchemy	—	v0.21.0
CVE-2019-7548	critical	—	sqlalchemy	—	v0.21.0
CVE-2020-11538	critical	—	pillow	—	v0.21.0
CVE-2020-14343	critical	—	pyyaml	—	v0.21.0
CVE-2020-1747	critical	—	pyyaml	—	v0.21.0
CVE-2020-5310	critical	—	pillow	—	v0.21.0
CVE-2020-5311	critical	—	pillow	—	v0.21.0
CVE-2020-5312	critical	—	pillow	—	v0.21.0
CVE-2021-25289	critical	—	pillow	—	v0.21.0
CVE-2021-34552	critical	—	pillow	—	v0.21.0
CVE-2022-22817	critical	—	pillow	—	v0.21.0
CVE-2022-45907	critical	—	torch	—	v0.21.0
CVE-2023-50447	critical	—	pillow	—	v0.21.0
CVE-2023-6730	critical	—	transformers	—	v0.21.0
CVE-2024-48063	critical	—	torch	—	v0.21.0
CVE-2025-32434	critical	—	torch	—	v0.21.0
CVE-2013-4251	high	—	scipy	—	v0.21.0
CVE-2014-1858	high	—	numpy	—	v0.21.0
CVE-2014-1859	high	—	numpy	—	v0.21.0
CVE-2014-1932	high	—	pillow	—	v0.21.0
CVE-2014-3589	high	—	pillow	—	v0.21.0
CVE-2014-3598	high	—	pillow	—	v0.21.0
CVE-2014-9601	high	—	pillow	—	v0.21.0
CVE-2016-0775	high	—	pillow	—	v0.21.0
CVE-2016-10075	high	—	tqdm	—	v0.21.0
CVE-2016-2533	high	—	pillow	—	v0.21.0
CVE-2016-3076	high	—	pillow	—	v0.21.0
CVE-2016-9190	high	—	pillow	—	v0.21.0
CVE-2017-12852	high	—	numpy	—	v0.21.0
CVE-2018-18074	high	—	requests	—	v0.21.0
CVE-2019-16865	high	—	pillow	—	v0.21.0
CVE-2019-18874	high	—	psutil	—	v0.21.0
CVE-2019-19911	high	—	pillow	—	v0.21.0
CVE-2020-10177	high	—	pillow	—	v0.21.0
CVE-2020-10378	high	—	pillow	—	v0.21.0
CVE-2020-10379	high	—	pillow	—	v0.21.0
CVE-2020-10994	high	—	pillow	—	v0.21.0
CVE-2020-35653	high	—	pillow	—	v0.21.0
CVE-2020-35654	high	—	pillow	—	v0.21.0
CVE-2020-5313	high	—	pillow	—	v0.21.0
CVE-2021-23437	high	—	pillow	—	v0.21.0
CVE-2021-25287	high	—	pillow	—	v0.21.0
CVE-2021-25288	high	—	pillow	—	v0.21.0
CVE-2021-25290	high	—	pillow	—	v0.21.0
CVE-2021-25291	high	—	pillow	—	v0.21.0
CVE-2021-25293	high	—	pillow	—	v0.21.0
CVE-2021-27921	high	—	pillow	—	v0.21.0
CVE-2021-27922	high	—	pillow	—	v0.21.0
CVE-2021-27923	high	—	pillow	—	v0.21.0
CVE-2021-28675	high	—	pillow	—	v0.21.0
CVE-2021-28676	high	—	pillow	—	v0.21.0
CVE-2021-28677	high	—	pillow	—	v0.21.0
CVE-2021-41495	high	—	numpy	—	v0.21.0
CVE-2022-24303	high	—	pillow	—	v0.21.0
CVE-2022-30595	high	—	pillow	—	v0.21.0
CVE-2022-45198	high	—	pillow	—	v0.21.0
CVE-2022-45199	high	—	pillow	—	v0.21.0
CVE-2023-44271	high	—	pillow	—	v0.21.0
CVE-2023-4863	high	KEV	pillow	—	v0.21.1
CVE-2023-7018	high	—	transformers	—	v0.21.0
CVE-2024-11392	high	—	transformers	—	v0.21.0
CVE-2024-11393	high	—	transformers	—	v0.21.0
CVE-2024-11394	high	—	transformers	—	v0.21.0
CVE-2024-23334	high	—	aiohttp	—	v0.21.0
CVE-2024-28219	high	—	pillow	—	v0.21.0
CVE-2024-30251	high	—	aiohttp	—	v0.21.0
CVE-2024-31580	high	—	torch	—	v0.21.0
CVE-2024-31583	high	—	torch	—	v0.21.0
CVE-2025-48379	high	—	pillow	—	v0.21.0
CVE-2025-69223	high	—	aiohttp	—	v0.21.0
CVE-2026-1260	high	—	sentencepiece	—	v0.21.0
CVE-2026-25990	high	—	pillow	—	v0.21.0
CVE-2026-32640	high	—	simpleeval	—	v0.21.0
CVE-2026-40192	high	—	pillow	—	v0.21.0
CVE-2026-42311	high	—	pillow	—	v0.21.0
CVE-2014-1829	medium	—	requests	—	v0.21.0
CVE-2014-1830	medium	—	requests	—	v0.21.0
CVE-2014-1933	medium	—	pillow	—	v0.21.0
CVE-2015-2296	medium	—	requests	—	v0.21.0
CVE-2016-0740	medium	—	pillow	—	v0.21.0
CVE-2016-9189	medium	—	pillow	—	v0.21.0
CVE-2020-35655	medium	—	pillow	—	v0.21.0
CVE-2021-25292	medium	—	pillow	—	v0.21.0
CVE-2021-28678	medium	—	pillow	—	v0.21.0
CVE-2021-29510	medium	—	pydantic	—	v0.21.0
CVE-2021-33430	medium	—	numpy	—	v0.21.0
CVE-2021-34141	medium	—	numpy	—	v0.21.0
CVE-2021-41496	medium	—	numpy	—	v0.21.0
CVE-2022-22815	medium	—	pillow	—	v0.21.0
CVE-2022-22816	medium	—	pillow	—	v0.21.0
CVE-2023-2800	medium	—	transformers	—	v0.21.0
CVE-2023-32681	medium	—	requests	—	v0.21.0
CVE-2023-37276	medium	—	aiohttp	—	v0.21.0
CVE-2023-47627	medium	—	aiohttp	—	v0.21.0
CVE-2023-49081	medium	—	aiohttp	—	v0.21.0
CVE-2023-49082	medium	—	aiohttp	—	v0.21.0
CVE-2024-12720	medium	—	transformers	—	v0.21.0
CVE-2024-23829	medium	—	aiohttp	—	v0.21.0
CVE-2024-27306	medium	—	aiohttp	—	v0.21.0
CVE-2024-35195	medium	—	requests	—	v0.21.0
CVE-2024-3772	medium	—	pydantic	—	v0.21.0
CVE-2024-42367	medium	—	aiohttp	—	v0.21.0
CVE-2024-47081	medium	—	requests	—	v0.21.0
CVE-2024-52303	medium	—	aiohttp	—	v0.21.0
CVE-2024-52304	medium	—	aiohttp	—	v0.21.0
CVE-2025-1194	medium	—	transformers	—	v0.21.0
CVE-2025-2099	medium	—	transformers	—	v0.21.0
CVE-2025-3262	medium	—	transformers	—	v0.21.0
CVE-2025-3263	medium	—	transformers	—	v0.21.0
CVE-2025-3264	medium	—	transformers	—	v0.21.0
CVE-2025-3730	medium	—	torch	—	v0.21.0
CVE-2025-3933	medium	—	transformers	—	v0.21.0
CVE-2025-5197	medium	—	transformers	—	v0.21.0
CVE-2025-6051	medium	—	transformers	—	v0.21.0
CVE-2025-6638	medium	—	transformers	—	v0.21.0
CVE-2025-68146	medium	—	filelock	—	v0.21.0
CVE-2025-6921	medium	—	transformers	—	v0.21.0
CVE-2025-69227	medium	—	aiohttp	—	v0.21.0
CVE-2025-69228	medium	—	aiohttp	—	v0.21.0
CVE-2025-69229	medium	—	aiohttp	—	v0.21.0
CVE-2025-71176	medium	—	pytest	—	v0.21.0
CVE-2026-1839	medium	—	transformers	—	v0.21.0
CVE-2026-22701	medium	—	filelock	—	v0.21.0
CVE-2026-22815	medium	—	aiohttp	—	v0.21.0
CVE-2026-25645	medium	—	requests	—	v0.21.0
CVE-2026-34515	medium	—	aiohttp	—	v0.21.0
CVE-2026-34516	medium	—	aiohttp	—	v0.21.0
CVE-2026-34525	medium	—	aiohttp	—	v0.21.0
CVE-2026-42308	medium	—	pillow	—	v0.21.0
CVE-2026-42309	medium	—	pillow	—	v0.21.0
CVE-2026-42310	medium	—	pillow	—	v0.21.0
GHSA-jgpv-4h4c-xhw3	medium	—	pillow	—	v0.21.0
GHSA-pjjw-qhg8-p2p9	medium	—	aiohttp	—	v0.21.0
CVE-2021-21330	low	—	aiohttp	—	v0.21.0
CVE-2023-47641	low	—	aiohttp	—	v0.21.0
CVE-2024-34062	low	—	tqdm	—	v0.21.0
CVE-2024-3568	low	—	transformers	—	v0.21.0
CVE-2025-2953	low	—	torch	—	v0.21.0
CVE-2025-3777	low	—	transformers	—	v0.21.0
CVE-2025-53643	low	—	aiohttp	—	v0.21.0
CVE-2025-69224	low	—	aiohttp	—	v0.21.0
CVE-2025-69225	low	—	aiohttp	—	v0.21.0
CVE-2025-69226	low	—	aiohttp	—	v0.21.0
CVE-2025-69230	low	—	aiohttp	—	v0.21.0
CVE-2026-34513	low	—	aiohttp	—	v0.21.0
CVE-2026-34514	low	—	aiohttp	—	v0.21.0
CVE-2026-34517	low	—	aiohttp	—	v0.21.0
CVE-2026-34518	low	—	aiohttp	—	v0.21.0
CVE-2026-34519	low	—	aiohttp	—	v0.21.0
CVE-2026-34520	low	—	aiohttp	—	v0.21.0
GHSA-4fx9-vc88-q2xc	low	—	pillow	—	v0.21.0
CVE-2023-25399	unknown	—	scipy	—	v0.21.0
CVE-2023-29824	unknown	—	scipy	—	v0.21.0
CVE-2024-31584	unknown	—	torch	—	v0.21.0
OSV-2022-1074	unknown	—	pillow	—	v0.21.0
OSV-2022-715	unknown	—	pillow	—	v0.21.0
PYSEC-2023-175	unknown	—	pillow	—	v0.21.0

Showing 163 of 163