CVE-2026-108545 SillyTavern 1.12.13 through 1.19.0 Pre-Authentication Denial of Service via Body Parsing

SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large or compressed JSON or urlencoded bodies up to 50...

CVE-2026-108545

SillyTavern versions 1.12.13 through 1.19.0 are vulnerable to a pre-authentication Denial of Service (DoS) . The root cause is that body-parser middleware executes before authentication and whitelist checks, allowing unauthenticated remote attackers to submit large or compressed JSON or urlencode...

PT-2026-109656

Name of the Vulnerable Software and Affected Versions SillyTavern versions 1.12.13 through 1.19.0 Description A denial of service issue exists where unauthenticated remote attackers can exhaust system memory and CPU resources. This occurs because the body-parser middleware processes incoming...