AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

InvokeAI security advisories

5 advisories · none critical or high in 12 months · latest Sep 18, 2025

Repository

5 advisories

Critical 9.8Sep 18, 2025InvokeAI has External Control of File Name or PathCVE-2025-6237fixed in 6.7.0Critical 9.8Mar 21, 2025InvokeAI Deserialization of Untrusted Data vulnerabilityCVE-2024-12029fixed in 5.4.3rc2Critical 9.1Mar 20, 2025InvokeAI Arbitrary File Deletion vulnerabilityCVE-2024-11042fixed in 5.3.0rc1High 7.5Mar 20, 2025InvokeAI Uncontrolled Resource Consumption vulnerabilityCVE-2024-11043no fix yetHigh 7.5Mar 20, 2025InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`CVE-2024-10821no fix yet
About InvokeAI

Invoke is a leading creative engine for Stable Diffusion models, empowering professionals, artists, and enthusiasts to generate and create visual media using the latest AI-driven technologies. The solution offers an industry leading WebUI, and serves as the foundation for multiple commercial product

Packages watched: invokeai (PyPI).

invoke-ai/InvokeAIOn ReposInvoke