Sillytavern

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 12
    Known Exploited: 0
    3
    Critical Level Threats
    5
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-44651

    SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware

    Last Modified: Jun 01, 2026
    Published: May 29, 2026

    CVE-2026-44650

    SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    Last Modified: May 29, 2026
    Published: May 29, 2026

    CVE-2026-44648

    SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover

    Last Modified: May 29, 2026
    Published: May 29, 2026

    CVE-2026-44649

    SillyTavern: Authentication Bypass via SSO Header Injection

    Last Modified: Jun 02, 2026
    Published: May 29, 2026

    CVE-2026-44652

    SillyTavern: SSRF vulnerability in the CORS proxy middleware

    Last Modified: May 29, 2026
    Published: May 29, 2026
    Items Per Page