CVE Vulnerabilities - 20 April 2026

A security issue in Brikcss Merge versions 1.3.0 and earlier allows hackers to remotely manipulate certain parts of the software. This could lead to unexpected behavior or compromised data. Update to ...

A security weakness in Serge API Model Endpoint can allow attackers to bypass authentication and access sensitive data remotely. This vulnerability has been made publicly available and can be exploite...

A security flaw in vibrantlabsai RAGAS version 0.4.3 or earlier allows an attacker to trick the system into making unauthorized requests on behalf of the server. This could be used to access sensitive...

A security issue in TransformerOptimus SuperAGI allows an attacker to bypass authorization checks and potentially access budget data without permission. This could happen if an attacker exploits a pub...

A security issue in TransformerOptimus SuperAGI versions up to 0.0.14 allows attackers to bypass authorization controls for updating organisation data. This means an attacker can potentially make chan...

A weakness in TransformerOptimus SuperAGI, a popular AI software, allows an attacker to access user data without proper authorization. This means someone with malicious intent can potentially gain acc...

A vulnerability in ComfyUI versions up to 0.13.0 allows an attacker to access files outside of their intended path. This could lead to unauthorized access to sensitive information. Update ComfyUI to t...

A flaw in ComfyUI version 0.13.0 and earlier allows attackers to access unintended files on the server. This could lead to sensitive data being exposed or malicious code being executed. Update to the ...

ComfyUI versions up to 0.13.0 are vulnerable to a cross-site request forgery attack, which can be initiated remotely. This means that an attacker could potentially trick users into performing unintend...

A bug in ComfyUI's file server.py in the View Endpoint can be exploited remotely, allowing an attacker to inject malicious code. This can be done by manipulating the affected functionality, and exploi...

A security flaw in ComfyUI's user data management system allows an attacker to inject malicious code, potentially stealing or manipulating sensitive user information. This could happen if you're using...