SillyTavern has a SSRF vulnerability in the CORS proxy middleware

Description

SillyTavern 1.18.0 added a generic server-side request filter (Private Request Whitelisting).

Recommendation

Update the sillytavern package to the latest compatible version. Followings are version details:

• Affected version(s): <= 1.17.0
• Patched version(s): 1.18.0

References

• GHSA-ccfq-2454-f5xw
• CVE-2026-44652
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware - CVE-2026-44651
• SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl - CVE-2026-46372
• Axios: no_proxy bypass via IP alias allows SSRF - CVE-2026-42038
• Velocity.js has a Prototype Pollution vulnerability through #set path assignment - CVE-2026-44966

You might also like:

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

How do hackers hack websites?

Tags:

npm

sillytavern