Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SillyTavern — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in SillyTavern, with AI-generated Chinese analysis, references, and POCs.

Vendor: SillyTavern

CVE IDTitleCVSSSeverityPublished
CVE-2026-34526 SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6 CWE-918 5.0 Medium2026-04-02
CVE-2026-34524 SillyTavern: Path traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root CWE-22 8.3 High2026-04-02
CVE-2026-34523 SillyTavern: Path traversal allows file existence oracle CWE-22 5.3 Medium2026-04-02
CVE-2026-34522 SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory CWE-22 8.1 High2026-04-02
CVE-2026-26286 SillyTavern has Server-Side Request Forgery (SSRF) via Asset Download Endpoint that Allows Reading Internal Services CWE-918 6.5 -2026-02-19
CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding CWE-346 9.7 Critical2025-10-06

All 6 known CVE vulnerabilities affecting SillyTavern with full Chinese analysis, references, and POCs where available.