storyicon CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM storyicon CVE published 2026-10-13

CVE-2026-108962

A code injection vulnerability was found in storyicon comfyui_segment_anything GroundingDINO Model Loading in slconfig.py. The function SLConfig._file2dict is vulnerable to code injection via the argument config. This issue allows for remote attacks. The product uses rolling releases, so affected and updated versions are not available. The project was informed early but has not responded yet.