Invoke security advisories
5 advisories across InvokeAI
| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 182025 | InvokeAI has External Control of File Name or Path Critical9.8Sep 18, 2025 | Critical9.8 | 6.7.0 |
| Mar 212025 | InvokeAI Deserialization of Untrusted Data vulnerabilityCritical9.8Mar 21, 2025 | Critical9.8 | 5.4.3rc2 |
| Mar 202025 | InvokeAI Arbitrary File Deletion vulnerabilityCritical9.1Mar 20, 2025 | Critical9.1 | 5.3.0rc1 |
| Mar 202025 | InvokeAI Uncontrolled Resource Consumption vulnerabilityHigh7.5Mar 20, 2025 | High7.5 | No fix yet |
| Mar 202025 | InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`High7.5Mar 20, 2025 | High7.5 | No fix yet |