Products: 2
    Vulnerabilities: 3
    Known Exploited: 0
    0
    Critical Level Threats
    3
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-77815

    Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories

    Last Modified: Aug 26, 2026
    Published: Aug 21, 2026

    CVE-2026-77814

    Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator

    Last Modified: Aug 21, 2026
    Published: Aug 21, 2026

    CVE-2023-46315

    The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-webui (aka Stable Diffusion web UI), if Gradio authentication is enabled without secret key configuration, allows remote attackers to read any local file via /file?path= in the URL, as demonstrated by reading /proc/self/environ to discover credentials.

    Last Modified: Nov 21, 2024
    Published: Oct 22, 2023
    Items Per Page
    Zanllp Vulnerabilities & Security CVEs | CVE-DB