Sillytavern
Monthly
Unauthenticated remote attackers can exhaust memory and CPU in SillyTavern 1.12.13 through 1.19.0 by sending large or compressed JSON or urlencoded request bodies, because the body-parser middleware processes request bodies before authentication and whitelist checks. Publicly available exploit code exists, and the vendor CVSS 4.0 vector rates this as a network-reachable, unauthenticated flaw (base 8.2); our independent assessment (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms no authentication or special toggle is required, but notes that realistic exploitation requires the operator to have exposed the instance to untrusted networks. Default configurations are affected, though SillyTavern is typically run as a local single-user service bound to localhost or a trusted LAN.
SillyTavern versions before 1.16.0 contain a server-side request forgery (SSRF) vulnerability in the asset download endpoint that allows authenticated users to make arbitrary HTTP requests from the server and access internal services, cloud metadata, and private network resources. Public exploit code exists for this vulnerability, which can be mitigated by upgrading to version 1.16.0 or configuring domain whitelisting in the config.yaml file.
Unauthenticated remote attackers can exhaust memory and CPU in SillyTavern 1.12.13 through 1.19.0 by sending large or compressed JSON or urlencoded request bodies, because the body-parser middleware processes request bodies before authentication and whitelist checks. Publicly available exploit code exists, and the vendor CVSS 4.0 vector rates this as a network-reachable, unauthenticated flaw (base 8.2); our independent assessment (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms no authentication or special toggle is required, but notes that realistic exploitation requires the operator to have exposed the instance to untrusted networks. Default configurations are affected, though SillyTavern is typically run as a local single-user service bound to localhost or a trusted LAN.
SillyTavern versions before 1.16.0 contain a server-side request forgery (SSRF) vulnerability in the asset download endpoint that allows authenticated users to make arbitrary HTTP requests from the server and access internal services, cloud metadata, and private network resources. Public exploit code exists for this vulnerability, which can be mitigated by upgrading to version 1.16.0 or configuring domain whitelisting in the config.yaml file.