CVE-2025-49126 | Visionatrix up to 2.5.0 ComfyUI /docs/flows get_swagger_ui_html cross site scripting (GHSA-w36r-9jvx-q48v / EUVD-2025-18919)

June 23, 2025 Yanac

A vulnerability classified as problematic was found in Visionatrix up to 2.5.0. Affected by this vulnerability is the function get_swagger_ui_html of the file /docs/flows of the component ComfyUI. The manipulation leads to cross site scripting.

This vulnerability is known as CVE-2025-49126. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More