Skip to content
OpenAdvisories

Package · npm

sillytavern

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-44650

    SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, POST /api/extensions/delete endpoint accepts extensionName:…

    SillyTavern SillyTavern sillytavern npm
  • Critical 9.8
    CVE-2026-44649

    SillyTavern: Authentication Bypass via SSO Header Injection

    SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern accepts Remote-User (Authelia) and X-Authentik-…

    SillyTavern SillyTavern sillytavern npm
  • Critical 9.7
    CVE-2025-59159

    SillyTavern Web Interface Vulnerable to DNS Rebinding

    SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susce…

    SillyTavern SillyTavern sillytavern npm