Skip to content
OpenAdvisories

Package · npm

sillytavern

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-44648 Public exploit

    SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover

    SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to 1.18.0, SillyTavern relies on cookie-session for authentication, st…

    SillyTavern SillyTavern sillytavern npm