https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12375.htmlhttps://patchthecve.com/cve/CVE-2024-12375.htmlWed, 17 Jun 2026 06:59:36 +0000MEDIUM 6.5: A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.https://patchthecve.com/cve/CVE-2024-12374.htmlhttps://patchthecve.com/cve/CVE-2024-12374.htmlWed, 17 Jun 2026 06:59:36 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c. An attacker can upload an HTML file, which the application interprets as content-type application/html. If a victim accesses the malicious link, it will execute arbitrary JavaScript https://patchthecve.com/cve/CVE-2024-12074.htmlhttps://patchthecve.com/cve/CVE-2024-12074.htmlWed, 17 Jun 2026 06:58:59 +0000MEDIUM 6.5: A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filenahttps://patchthecve.com/cve/CVE-2024-11045.htmlhttps://patchthecve.com/cve/CVE-2024-11045.htmlWed, 17 Jun 2026 06:56:56 +0000CRITICAL 9.6: A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository. The vulnerability arises from the lack of proper validation on WebSocket connections at ws://127.0.0.1:7860https://patchthecve.com/cve/CVE-2024-11044.htmlhttps://patchthecve.com/cve/CVE-2024-11044.htmlWed, 17 Jun 2026 06:56:56 +0000MEDIUM 6.1: An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This vulnerability can be exploited to conduct phishing attacks, distribute malware, and steal user credhttps://patchthecve.com/cve/CVE-2024-10935.htmlhttps://patchthecve.com/cve/CVE-2024-10935.htmlWed, 17 Jun 2026 06:56:43 +0000HIGH 7.5: automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, lea