xinyun/ComfyUI
1
0
Fork 0
mirror of https://git.datalinker.icu/comfyanonymous/ComfyUI synced 2026-09-13 11:27:08 +08:00
Code Issues Packages Projects Releases Wiki Activity

Hard-enforce ultralytics <= 8.3.40.

Browse Source
This commit is contained in:
Thomas Ward 2024-12-09 11:28:25 -05:00 committed by GitHub
parent e2fafe0686
commit fd7287fe61
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
main.py
View File

@ -7,6 +7,23 @@ import folder_paths
import time import time
from comfy.cli_args import args from comfy.cli_args import args
from app.logger import setup_logger from app.logger import setup_logger
from packaging.version import Version
# Security: Hard-pin ultralytics to 8.3.40, enforce as a test during ComfyUI startup. If ultralytics exists, 8.3.40 is last "okay" version.
# Refer to following:
# - https://github.com/ultralytics/ultralytics/issues/18027
# - https://blog.comfy.org/comfyui-statement-on-the-ultralytics-crypto-miner-situation/
try:
from ultralytics import __version__ as ultralytics_version
if Version(ultralytics_version) > Version('8.3.40'):
raise EnvironmentError("[SECURITY ALERT] Unsafe malicious versions of Ultralytics detected, last known good version 8.3.40.")
except ModuleNotFound:
pass
except Exception:
raise
if __name__ == "__main__": if __name__ == "__main__":
#NOTE: These do not do anything on core ComfyUI which should already have no communication with the internet, they are for custom nodes. #NOTE: These do not do anything on core ComfyUI which should already have no communication with the internet, they are for custom nodes.