Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filtersSillyTavern has a SSRF vulnerability in the CORS proxy middleware
SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware
SillyTavern has a Path Traversal issue
SillyTavern has Authentication Bypass via SSO Header Injection
SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover
SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6
SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user data root
SillyTavern: Path Traversal allows file existence oracle
SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory
SillyTavern Web Interface Vulnerable DNS Rebinding
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.