All 5 CVE vulnerabilities found in invoke-ai/invokeai, with AI-generated Chinese analysis, references, and POCs.
Vendor: invoke-ai
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-6237 | Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai CWE-73 | 9.8AI | CriticalAI | 2025-09-18 |
| CVE-2024-11043 | Denial of Service (DoS) via Large Payload in Board Name Field in invoke-ai/invokeai CWE-400 | 7.5 | - | 2025-03-20 |
| CVE-2024-10821 | Denial of Service (DoS) in invoke-ai/invokeai CWE-835 | 7.5 | - | 2025-03-20 |
| CVE-2024-11042 | Arbitrary File Delete in invoke-ai/invokeai CWE-73 | 9.1 | - | 2025-03-20 |
| CVE-2024-12029 | Remote Code Execution via Model Deserialization in invoke-ai/invokeai CWE-502 | 8.8 | - | 2025-03-20 |
All 5 known CVE vulnerabilities affecting invoke-ai/invokeai with full Chinese analysis, references, and POCs where available.