CRITICAL9.1PyPI
GHSA-227r-w5j2-6243· CVE-2024-11042, PYSEC-2026-358InvokeAI Arbitrary File Deletion vulnerability
Modified: 6/29/2026
package
PyPI/invokeai
pkg:pypi/invokeai
HIGH7.5PyPI
GHSA-6f6x-f56q-5xgv· CVE-2024-10821, PYSEC-2026-1466InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
Modified: 7/7/2026
HIGH7.5PyPI
GHSA-ffh5-w482-c7m5· CVE-2024-11043, PYSEC-2026-1467InvokeAI Uncontrolled Resource Consumption vulnerability
Modified: 7/7/2026
CRITICAL9.8PyPI
GHSA-mcrp-whpw-jp68· CVE-2024-12029, PYSEC-2025-9InvokeAI Deserialization of Untrusted Data vulnerability
Modified: 5/20/2025
CRITICAL9.8PyPI
GHSA-vv9c-xxg7-wmv7· CVE-2025-6237, PYSEC-2026-359InvokeAI has External Control of File Name or Path
Modified: 6/29/2026
—PyPI
PYSEC-2025-9· CVE-2024-12029, GHSA-mcrp-whpw-jp68Modified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-1466· CVE-2024-10821, GHSA-6f6x-f56q-5xgvInvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1467· CVE-2024-11043, GHSA-ffh5-w482-c7m5InvokeAI Uncontrolled Resource Consumption vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
PYSEC-2026-358· CVE-2024-11042, GHSA-227r-w5j2-6243InvokeAI Arbitrary File Deletion vulnerability
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-359· CVE-2025-6237, GHSA-vv9c-xxg7-wmv7InvokeAI has External Control of File Name or Path
Modified: 7/1/2026