CVE-2025-67303
2 advisories.
PyPI/comfyui-manager CVE-2025-67303: high 7.5
ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
Action: Upgrade comfyui-manager to 3.38 or later.
pip install comfyui-manager==3.38Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.38 | - |
Fixed versions
| 3.38 |
Sources
- osv: GHSA-95pq-hr8p-f5g7
- https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-95pq-hr8p-f5g7
- https://nvd.nist.gov/vuln/detail/CVE-2025-67303
- https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338/commits/e44c5cef58fb4973670b86433b9d24d077b44a26
- https://github.com/Comfy-Org/ComfyUI-Manager
- https://github.com/Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md
CVE-2025-67303 · published · modified · JSON
PyPI/comfyui-manager CVE-2025-67303: high 7.5
ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
Action: Upgrade comfyui-manager to 3.38 or later.
pip install comfyui-manager==3.38Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.38 | - |
Fixed versions
| 3.38 |
Sources
- osv: PYSEC-2026-2422
- https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-95pq-hr8p-f5g7
- https://nvd.nist.gov/vuln/detail/CVE-2025-67303
- https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338/commits/e44c5cef58fb4973670b86433b9d24d077b44a26
- https://github.com/Comfy-Org/ComfyUI-Manager
- https://github.com/Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md
- https://pypi.org/project/comfyui-manager
- https://github.com/advisories/GHSA-95pq-hr8p-f5g7
CVE-2025-67303 · published · modified · JSON