EUVD-2020-17107

Malware in sbrugna...

EUVD-2018-3355

Malware in sbrugna...

EUVD-2021-21211

Malware in sbrugna...

EUVD-2019-4512

Malware in sbrugna...

EUVD-2016-0007

Malware in sbrugna...

EUVD-2019-10883

Malware in sbrugna...

EUVD-2017-11283

Malware in sbrugna...

EUVD-2020-17108

Malware in sbrugna...

EUVD-2007-5254

Malware in sbrugna...

EUVD-2021-10017

Malware in sbrugna...

Improper Verification of Source of a Communication Channel

Overview sillytavern is a LLM Frontend for Power Users Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of the Host header in inbound HTTP requests. An attacker can gain unauthorized access to sensitive data,...

EUVD-2025-32552

SillyTavern Web Interface Vulnerable DNS Rebinding...

SillyTavern Web Interface Vulnerable DNS Rebinding

Summary The web UI for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing, etc. Details DNS rebinding is a method to bypass the CORS policies by tricking the browser into resolving...

GHSA-7CXJ-W27X-X78Q SillyTavern Web Interface Vulnerable DNS Rebinding

Summary The web UI for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing, etc. Details DNS rebinding is a method to bypass the CORS policies by tricking the browser into resolving...

CVE-2025-59159

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-59159

SillyTavern’s web UI (prior to 1.13.4) is vulnerable to DNS rebinding, enabling attackers to read chats, inject HTML, install extensions, and execute phishing-style actions. The issue is mitigated in 1.13.4 by adding a host validation setting (hostWhitelist.enabled) in config.yaml or SILLYTAVERN_...

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

PT-2025-40903

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.13.4 Description SillyTavern is a locally installed user interface for interacting with large language models, image generation engines, and text-to-speech models. The web user interface, in versions prior to...