stable-diffusion-webui

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Limited file write in Stable-diffusion-webui - GHSL-2024-010CVE-2024-31462AUTOMATIC1111 · CVSS 6.3 · 0.7% likely

   CWE-22

2. AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resourcesCVE-2026-111985AUTOMATIC1111 · CVSS 4.3 · 0.4% likely

   CWE-770

3. Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flagsCVE-2026-82288AUTOMATIC1111 · CVSS 7.5 · 0.4% likely

   CWE-522

4. AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scriptingCVE-2026-111984AUTOMATIC1111 · CVSS 4.3 · 0.4% likely

   CWE-79

5. AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scriptingCVE-2026-111987AUTOMATIC1111 · CVSS 4.3 · 0.4% likely

   CWE-79

6. AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injectionCVE-2026-111986AUTOMATIC1111 · CVSS 6.3 · 0.3% likely

   CWE-94

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.