Skip to main content
cve.nowby Sazabi
← npm
npmPackage

sillytavern

11 known vulnerabilities (3 critical, 4 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
1.19.0 (Sep 14, 2026): no advisory affects it
Newest unaffected release
1.19.0 (Sep 14, 2026), the latest release
Advisories
11 · 3 critical, 4 high, 4 medium
Weekly downloads
940
Dependents
0
Releases
86 since 1.4.1 (Apr 22, 2023)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 11

  • CVE-2026-44651Medium 6.9

    SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware

    Affected: fixed in 1.18.0.

    Fixed in 1.18.0 (released May 3, 2026, 26 days before disclosure).

    The latest release, 1.19.0, is not affected.

    70% of sillytavern downloads last week were affected versions (1.1K).

  • CVE-2026-44650Critical 9.1

    SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    Affected: fixed in 1.18.0.

    Fixed in 1.18.0 (released May 3, 2026, 26 days before disclosure).

    The latest release, 1.19.0, is not affected.

    70% of sillytavern downloads last week were affected versions (1.1K).

  • SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover

    Affected: fixed in 1.18.0.

    Fixed in 1.18.0 (released May 3, 2026, 26 days before disclosure).

    The latest release, 1.19.0, is not affected.

    70% of sillytavern downloads last week were affected versions (1.1K).

  • CVE-2026-44649Critical 9.8

    SillyTavern: Authentication Bypass via SSO Header Injection

    Affected: fixed in 1.18.0.

    Fixed in 1.18.0 (released May 3, 2026, 26 days before disclosure).

    The latest release, 1.19.0, is not affected.

    70% of sillytavern downloads last week were affected versions (1.1K).

  • CVE-2026-44652Medium 6.9

    SillyTavern: SSRF vulnerability in the CORS proxy middleware

    Affected: fixed in 1.18.0.

    Fixed in 1.18.0 (released May 3, 2026, 26 days before disclosure).

    The latest release, 1.19.0, is not affected.

    70% of sillytavern downloads last week were affected versions (1.1K).

  • SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl

    Affected: fixed in 1.18.0.

    Fixed in 1.18.0 (released May 3, 2026, 26 days before disclosure).

    The latest release, 1.19.0, is not affected.

    70% of sillytavern downloads last week were affected versions (1.1K).

  • CVE-2026-34526Medium 5.0

    SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6

    Affected: fixed in 1.17.0.

    Fixed in 1.17.0 (released Mar 28, 2026, 5 days before disclosure).

    The latest release, 1.19.0, is not affected.

    65% of sillytavern downloads last week were affected versions (1K).

  • SillyTavern: Path traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root

    Affected: fixed in 1.17.0.

    Fixed in 1.17.0 (released Mar 28, 2026, 5 days before disclosure).

    The latest release, 1.19.0, is not affected.

    65% of sillytavern downloads last week were affected versions (1K).

  • CVE-2026-34523Medium 5.3

    SillyTavern: Path traversal allows file existence oracle

    Affected: fixed in 1.17.0.

    Fixed in 1.17.0 (released Mar 28, 2026, 5 days before disclosure).

    The latest release, 1.19.0, is not affected.

    65% of sillytavern downloads last week were affected versions (1K).

  • SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory

    Affected: fixed in 1.17.0.

    Fixed in 1.17.0 (released Mar 28, 2026, 5 days before disclosure).

    The latest release, 1.19.0, is not affected.

    65% of sillytavern downloads last week were affected versions (1K).

  • CVE-2025-59159Critical 9.7

    SillyTavern Web Interface Vulnerable to DNS Rebinding

    Affected: fixed in 1.13.4.

    Fixed in 1.13.4 (released Sep 13, 2025, 23 days before disclosure).

    The latest release, 1.19.0, is not affected.

    53% of sillytavern downloads last week were affected versions (847).