AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

SillyTavern security advisories

11 advisories · 6 critical or high in 12 months · latest May 19

Repository

11 advisories

High 8.5May 19SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrlCVE-2026-46372fixed in 1.18.0MediumMay 12SillyTavern has a SSRF vulnerability in the CORS proxy middlewareCVE-2026-44652fixed in 1.18.0MediumMay 12SillyTavern has a reflected XSS vulnerability in the CORS proxy middlewareCVE-2026-44651fixed in 1.18.0Critical 9.1May 12SillyTavern has a Path Traversal issueCVE-2026-44650fixed in 1.18.0Critical 9.8May 12SillyTavern has Authentication Bypass via SSO Header InjectionCVE-2026-44649fixed in 1.18.0High 7.5May 12SillyTavern: insufficient session expirationCVE-2026-44648fixed in 1.18.0Medium 5.0Apr 1SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6CVE-2026-34526fixed in 1.17.0High 8.3Apr 1SillyTavern: path traversalCVE-2026-34524fixed in 1.17.0Medium 5.3Apr 1SillyTavern: Path Traversal allows file existence oracleCVE-2026-34523fixed in 1.17.0High 8.1Apr 1SillyTavern: path traversalCVE-2026-34522fixed in 1.17.0Critical 9.6Oct 6, 2025SillyTavern Web Interface Vulnerable DNS RebindingCVE-2025-59159fixed in 1.13.4
About SillyTavern

LLM Frontend for Power Users.

Packages watched: sillytavern (npm).

SillyTavern/SillyTavernOn Repos