Priority HIGH 69
SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist chec…
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00577 · Published 2026-10-10 · No fix listed CWE-400
Priority LOW 36
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00323 · Published 2026-05-29 · Fixed in 1.18.0 CWE-79
Priority HIGH 78
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00567 · Published 2026-05-29 · Fixed in 1.18.0 CWE-22
Priority HIGH 68
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00394 · Published 2026-05-29 · Fixed in 1.18.0 CWE-613
Priority HIGH 82
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00218 · Published 2026-05-29 · Fixed in 1.18.0 CWE-290
Priority LOW 37
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00375 · Published 2026-05-29 · Fixed in 1.18.0 CWE-918
Priority HIGH 70
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00866 · Published 2026-05-29 · Fixed in 1.18.0 CWE-918
Priority MEDIUM 56
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00217 · Published 2026-04-02 · Fixed in 1.17.0 CWE-918
Priority HIGH 73
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0058 · Published 2026-04-02 · Fixed in 1.17.0 CWE-22
Priority MEDIUM 63
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-04-02 · Fixed in 1.17.0 CWE-22
Priority HIGH 68
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00426 · Published 2026-04-02 · Fixed in 1.17.0 CWE-22
Priority MEDIUM 64
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00317 · Published 2026-02-19 · Fixed in 1.16.0 CWE-918
Priority HIGH 76
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models.
CVSS 3.1CRITICAL 9.7· Network · No auth · User interaction · EPSS 0.0025 · Published 2025-10-06 · Fixed in 1.13.4 CWE-346