{"items":[{"id":"CVE-2026-111987","published":"2026-10-18T13:15:16.251Z","updated":"2026-10-19T16:14:37.028Z","title":"AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00353,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111986","published":"2026-10-18T13:00:16.340Z","updated":"2026-10-22T02:21:58.777Z","title":"AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00306,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111985","published":"2026-10-18T12:00:17.515Z","updated":"2026-10-19T18:35:22.920Z","title":"AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00425,"kevAdded":null,"exploit":true},{"id":"CVE-2026-111984","published":"2026-10-18T11:45:16.475Z","updated":"2026-10-19T16:38:21.574Z","title":"AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting","severity":"MEDIUM","score":5.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00358,"kevAdded":null,"exploit":true},{"id":"CVE-2026-82288","published":"2026-08-28T16:19:05.909Z","updated":"2026-09-24T14:20:18.074Z","title":"Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags","severity":"HIGH","score":8.7,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.00414,"kevAdded":null,"exploit":true},{"id":"CVE-2024-12074","published":"2025-03-20T10:11:10.026Z","updated":"2025-03-20T14:23:03.483Z","title":"Denial of Service in automatic1111/stable-diffusion-webui","severity":"MEDIUM","score":6.5,"vendor":"automatic1111","product":"automatic1111/stable-diffusion-webui","kev":false,"epss":0.00836,"kevAdded":null,"exploit":true},{"id":"CVE-2024-11045","published":"2025-03-20T10:10:12.258Z","updated":"2025-03-20T18:24:44.284Z","title":"Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui","severity":"CRITICAL","score":9.6,"vendor":"automatic1111","product":"automatic1111/stable-diffusion-webui","kev":false,"epss":0.00413,"kevAdded":null,"exploit":true},{"id":"CVE-2024-12375","published":"2025-03-20T10:10:02.746Z","updated":"2025-03-20T14:36:35.294Z","title":"Local File Inclusion in automatic1111/stable-diffusion-webui","severity":"MEDIUM","score":6.5,"vendor":"automatic1111","product":"automatic1111/stable-diffusion-webui","kev":false,"epss":0.00856,"kevAdded":null,"exploit":true},{"id":"CVE-2024-10935","published":"2025-03-20T10:09:51.519Z","updated":"2025-10-15T12:49:26.636Z","title":"Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui","severity":"HIGH","score":7.5,"vendor":"automatic1111","product":"automatic1111/stable-diffusion-webui","kev":false,"epss":0.00835,"kevAdded":null,"exploit":true},{"id":"CVE-2024-11044","published":"2025-03-20T10:09:31.708Z","updated":"2025-03-20T18:37:59.803Z","title":"Open Redirect in automatic1111/stable-diffusion-webui","severity":"MEDIUM","score":6.1,"vendor":"automatic1111","product":"automatic1111/stable-diffusion-webui","kev":false,"epss":0.00845,"kevAdded":null,"exploit":true},{"id":"CVE-2024-12374","published":"2025-03-20T10:08:49.639Z","updated":"2025-03-20T19:02:09.492Z","title":"Stored XSS in automatic1111/stable-diffusion-webui","severity":"MEDIUM","score":6.1,"vendor":"automatic1111","product":"automatic1111/stable-diffusion-webui","kev":false,"epss":0.00426,"kevAdded":null,"exploit":true},{"id":"CVE-2024-31462","published":"2024-04-12T21:41:46.345Z","updated":"2024-08-02T01:52:57.047Z","title":"Limited file write in Stable-diffusion-webui - GHSL-2024-010","severity":"MEDIUM","score":6.3,"vendor":"AUTOMATIC1111","product":"stable-diffusion-webui","kev":false,"epss":0.0068,"kevAdded":null,"exploit":false}]}