sillytavern vulnerabilities (npm)
11 vulnerabilities.
-
sillytavernnpm SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl 8.5 High -
sillytavernnpm SillyTavern: SSRF vulnerability in the CORS proxy middleware 6.9 Medium -
sillytavernnpm SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware 6.9 Medium -
sillytavernnpm SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 9.1 Critical -
sillytavernnpm SillyTavern: Authentication Bypass via SSO Header Injection 9.8 Critical -
sillytavernnpm SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover 7.5 High -
sillytavernnpm SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6 5.0 Medium -
sillytavernnpm SillyTavern: Path traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root 8.3 High -
sillytavernnpm SillyTavern: Path traversal allows file existence oracle 5.3 Medium -
sillytavernnpm SillyTavern: Path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory 8.1 High -
sillytavernnpm SillyTavern Web Interface Vulnerable to DNS Rebinding 9.7 Critical