SillyTavern has a SSRF vulnerability in the CORS proxy middleware

Description

SillyTavern 1.18.0 added a generic server-side request filter (Private Request Whitelisting).

Recommendation

Update the sillytavern package to the latest compatible version. Followings are version details:

• Affected version(s): <= 1.17.0
• Patched version(s): 1.18.0

References

• GHSA-ccfq-2454-f5xw
• CVE-2026-44652
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware - CVE-2026-44651
• i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters - CVE-2026-42353
• SillyTavern: SSRF in SearXNG Search Proxy via Unvalidated baseUrl - CVE-2026-46372
• Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF - CVE-2025-62718

You might also like:

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

How do hackers hack websites?

Tags:

npm

sillytavern