wangbo/ComfyUI-Manager
1
0
Fork 0
mirror of https://github.com/Comfy-Org/ComfyUI-Manager.git synced 2026-05-15 03:17:23 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
4,662 Commits 28 Branches 145 Tags 968 MiB
c06ff81821
Commit Graph

4662 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Dr.Lt.Data
c06ff81821 fix(custom-node-list): restore xss + Image2Halftone entries and place comfymodeldownloader entry after last git-clone block 2026-05-11 03:58:07 +09:00
Dr.Lt.Data
10d48c2670
Merge pull request #2866 from thomaskippster/main 
Add ComfyUI Model Downloader Bridge to custom-node-list.json
 2026-05-11 03:56:43 +09:00
Dr.Lt.Data
b824811bc7 fix(custom-node-list): place BizyAirPlus entry after last git-clone block 2026-05-11 03:56:29 +09:00
Dr.Lt.Data
f9603624a9
Merge pull request #2803 from hahalfx/add-bizyairplus 
Update custom-node-list.json for adding new custom-node BizyAirPlus
 2026-05-11 03:55:55 +09:00
Dr.Lt.Data
cb17d1c848 fix(custom-node-list): place ComfyUI-Styler-Pipeline entry next to existing andreszs author block 2026-05-11 03:55:40 +09:00
Dr.Lt.Data
244421458d
Merge pull request #2800 from andreszs/add-styler-pipeline 
Add ComfyUI-Styler-Pipeline to custom-node-list.json
 2026-05-11 03:55:10 +09:00
Dr.Lt.Data
49218fdb57 fix(custom-node-list): place OpenPose-Studio + Ultralytics-Studio entries next to existing andreszs author block 2026-05-11 03:54:53 +09:00
Dr.Lt.Data
df1505efda
Merge pull request #2798 from andreszs/add-openpose-ultralytics-studio 
Add ComfyUI-OpenPose-Studio and ComfyUI-Ultralytics-Studio to custom-node-list.json
 2026-05-11 03:54:10 +09:00
Dr.Lt.Data
96ae4e0c9f fix(custom-node-list): place ComfyUI-AnimaTool entry next to existing Moeblack author block 2026-05-11 03:53:55 +09:00
Dr.Lt.Data
f94902966a
Merge pull request #2573 from Moeblack/add-comfyui-animatool 
Add ComfyUI-AnimaTool
 2026-05-11 03:53:07 +09:00
Dr.Lt.Data
b4d5d972de update DB 2026-05-11 03:31:37 +09:00
Dr.Lt.Data
3d7f7d2439 fix(custom-node-list): place ComfyUI-MotifVideo2B entry after last git-clone block 2026-05-11 03:27:55 +09:00
Dr.Lt.Data
2ae10236b9
Merge pull request #2829 from MotifTechnologies/feat/add-motifvideo2b 
Add ComfyUI-MotifVideo2B to custom-node-list.json
 2026-05-11 03:27:22 +09:00
Dr.Lt.Data
6ffead7ba9 fix(custom-node-list): place ComfyUI-Pixaroma entry after last git-clone block 2026-05-11 03:27:08 +09:00
Dr.Lt.Data
9a17c96da6
Merge pull request #2821 from pixaroma/add-pixaroma 
Add ComfyUI-Pixaroma to custom-node-list.json
 2026-05-11 03:26:36 +09:00
Dr.Lt.Data
39dfa902d5 fix(custom-node-list): place Kai Civitai LoRA Loader entry after last git-clone block 2026-05-11 03:26:23 +09:00
Dr.Lt.Data
e4fadee042
Merge pull request #2814 from kenyonxu/main 
Add Kai Civitai LoRA Loader to custom node list
 2026-05-11 03:25:49 +09:00
Dr.Lt.Data
d9f1ff34a7 fix(custom-node-list): place ComfyUI-SBTools entry after last git-clone block 2026-05-11 03:25:34 +09:00
Dr.Lt.Data
9aa2ca09b8
Merge pull request #2806 from Amatsukast/add-sbtools 
Add ComfyUI-SBTools
 2026-05-11 03:25:01 +09:00
Dr.Lt.Data
81605d31db fix(custom-node-list): remove trailing comma after last entry 2026-05-11 03:24:39 +09:00
Dr.Lt.Data
bdd6111d9d fix(custom-node-list): place Z-Fuse entry after last git-clone block 2026-05-11 03:24:08 +09:00
Dr.Lt.Data
a4b6a589d7
Merge pull request #2440 from destinyfaux/main 
Z-Fuse
 2026-05-11 03:23:30 +09:00
Dr.Lt.Data
611532491f fix(custom-node-list): place ComfyUI-Workflow-Studio entry next to existing ketle-man author block
Some checks are pending
Python Linting / Run Ruff (push) Waiting to run
Details
2026-05-11 01:33:43 +09:00
Dr.Lt.Data
ed8baf3e79
Merge pull request #2706 from ketle-man/add-workflow-studio 
Add ComfyUI-Workflow-Studio
 2026-05-11 01:33:09 +09:00
Dr.Lt.Data
111e4d38f4 fix(custom-node-list): place ComfyUI-PulseOfMotion entry after last git-clone block 2026-05-11 01:32:43 +09:00
Dr.Lt.Data
e6693e0b9f
Merge pull request #2742 from akashzeno/add-pulse-of-motion 
Add ComfyUI-PulseOfMotion to custom node list
 2026-05-11 01:32:04 +09:00
Dr.Lt.Data
0c8cdf9aa8 update DB 2026-05-11 01:15:02 +09:00
Dr.Lt.Data
8d2d37f1f7 fix(custom-node-list): place Happyhorse-Wrapper + Account-Manager entries next to existing magicwang1111 author block 2026-05-11 01:03:31 +09:00
Dr.Lt.Data
bc334c7aa5
Merge pull request #2835 from magicwang1111/codex/register-magicwang-nodes 
add  ComfyUI-Happyhorse-Wrapper and ComfyUI-Account-Manager
 2026-05-11 01:01:56 +09:00
Dr.Lt.Data
33d4b29422 update DB 2026-05-11 00:52:13 +09:00
Dr.Lt.Data
20d352c2b5 update DB 2026-05-11 00:16:15 +09:00
Thomas
117227e2fc Add ComfyUI Model Downloader Bridge to custom-node-list.json 2026-05-09 20:53:50 +02:00
Dr.Lt.Data
7a8fc44f90 update DB
Some checks failed
Python Linting / Run Ruff (push) Has been cancelled
Details
2026-05-08 19:07:12 +09:00
pixaroma
10ff7d091c Update ComfyUI-Pixaroma description to current feature set 2026-05-06 06:53:21 +03:00
Dr.Lt.Data
8d5c12037f fix(custom-node-list): place DemonAlone-StyleSelector entry next to existing DemonAlone author block
Some checks failed
Python Linting / Run Ruff (push) Has been cancelled
Details
2026-05-01 05:01:14 +09:00
Dr.Lt.Data
d370403e2d
Merge pull request #2827 from DemonAlone/Styler 
Add DemonAlone-StyleSelector-ComfyUI  to custom-node-list.json
 2026-05-01 05:00:39 +09:00
Dr.Lt.Data
e67e35795e fix(custom-node-list): place JH-PixelPro entry after last git-clone block 2026-05-01 05:00:29 +09:00
Dr.Lt.Data
ccf6d98457
Merge pull request #2809 from jetthuangai/add-comfyui-jh-pixelpro 
Add ComfyUI-JH-PixelPro
 2026-05-01 04:59:51 +09:00
Dr.Lt.Data
113324728e fix(custom-node-list): place Emiewn-Nodes entry after last git-clone block 2026-05-01 04:59:31 +09:00
Dr.Lt.Data
f2a3d39e26
Merge pull request #2805 from emiewnn/emiewnnodes 
Add ComfyUI-Emiewn-Nodes
 2026-05-01 04:58:21 +09:00
Dr.Lt.Data
ec72d983ad update DB 2026-05-01 04:45:57 +09:00
Dr.Lt.Data
a3aabfd72c
Merge pull request #2811 from Kyreo/main 
Add ComfyUI-CharacterPromptBuffer by Kyreo
 2026-05-01 04:42:19 +09:00
Dr.Lt.Data
03272b1f70 update DB
Some checks are pending
Python Linting / Run Ruff (push) Waiting to run
Details
2026-04-30 02:24:55 +09:00
magicwang1111
9b8f651061 Register magicwang1111 custom nodes 2026-04-28 18:11:01 +08:00
Dr.Lt.Data
66108ccdbc update DB
Some checks failed
Python Linting / Run Ruff (push) Has been cancelled
Details
2026-04-27 05:28:49 +09:00
Minsu Ha
80efc5dbc0 Add ComfyUI-MotifVideo2B to custom-node-list.json 2026-04-25 11:03:17 +00:00
DemonAlone
abf9c654b3
AddDemonAlone-StyleSelector-ComfyUI 
to custom-node-list.json
 2026-04-24 16:24:32 +03:00
pixaroma
5656002524 Add ComfyUI-Pixaroma to custom-node-list.json 2026-04-22 09:48:32 +03:00
pixaroma
484bb2fe4c Add ComfyUI-Pixaroma to custom-node-list.json 2026-04-22 09:47:16 +03:00
Dr.Lt.Data
491f847bbc
fix(security): harden CSRF with Content-Type gate and OpenAPI sync (#2819)
Some checks failed
Python Linting / Run Ruff (push) Has been cancelled
Details 
Defense-in-depth over GET→POST alone: reject the three CORS-safelisted
simple-form Content-Types (x-www-form-urlencoded, multipart/form-data,
text/plain) on 5 no-body POST handlers (snapshot/save,
manager/queue/{reset,start,update_comfyui}, manager/reboot) to block
<form method=POST> CSRF that bypasses method-only gating. Convert 10 pure
state-changing endpoints (fetch_updates, queue/{update_all,reset,start,
update_comfyui}, snapshot/{remove,restore,save}, comfyui_switch_version,
reboot) from GET to POST and split 5 config endpoints
(db_mode/preview_method/channel_url_list/policy/{component,update}) into
GET(read) + POST(write, JSON body). Emit the in_progress + done event pair
from the /manager/queue/install sync-enable fast-path so client UI
finalizes (previously only queue/start's empty worker done fired, leaving
item.restart unset and the Enable button visible after a successful enable).
Harden js/custom-nodes-manager.js completion path: await onQueueCompleted
with try/catch (surfaces silent turbogrid stale-item throws), replace the
{}.length == 0 no-op empty guard, set install_context before queue/install
to avoid a sync-completion race, wrap classList/updateCell in try/catch.
Resynchronize openapi.yaml with the converted routes (method → post, query
params → requestBody JSON schema, sibling post on 5 split endpoints).
Update 31 JS fetchApi call sites across 7 files; add
tests/test_csrf_content_type_helper.py covering 5 Content-Type cases via
aiohttp TestClient.

Reported-by: XlabAI Team of Tencent Xuanwu Lab
CVSS: 8.1 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)
 2026-04-22 05:04:07 +09:00