Dr.Lt.Data f39cbd56fe fix(custom-node-list): demote mickmumpitz/ComfyUI-SplatKit from default to dev channel (security hold) ...

Post-registration full re-verify (§14.7) found an unauthenticated CSRF-reachable
arbitrary-directory delete: DatasetProject.make(reset=True) runs shutil.rmtree on an
uncontained os.path.join(output_dir, dataset_name) (nodes/common.py:169-173) — an
absolute or ..-containing name escapes the output dir. Removed from default + node_db/new,
added to node_db/dev with [SECURITY ISSUE] suffix (reversible install-block, §4.7-H mechanic).
Restore to default on author fix (realpath+commonpath containment) + re-verify pass.

2026-08-19 08:43:25 +09:00

..

custom-node-list.json

fix(custom-node-list): demote mickmumpitz/ComfyUI-SplatKit from default to dev channel (security hold)

2026-08-19 08:43:25 +09:00

extension-node-map.json

update DB

2026-08-18 12:49:34 +09:00

github-stats.json

update DB

2026-08-19 08:29:05 +09:00

model-list.json

update DB

2023-12-24 20:08:56 +09:00

scan.sh

update DB

2025-07-29 07:45:05 +09:00