{"action":"Upgrade sillytavern to 1.13.4 or later.","affected":[{"fixed":"1.13.4","introduced":"0"}],"component":"sillytavern","cve_ids":["CVE-2025-59159"],"ecosystem":"npm","epss":0.0025,"exploited":false,"fixed_versions":["1.13.4"],"ghsa_id":"GHSA-7cxj-w27x-x78q","id":"tcs_01M5KF9PRHG880CWPCK3HF3HYW","modified_at":"2025-10-06T20:57:29.380317Z","published_at":"2025-10-06T20:18:55Z","references":["https://osv.dev/vulnerability/GHSA-7cxj-w27x-x78q","https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-7cxj-w27x-x78q","https://nvd.nist.gov/vuln/detail/CVE-2025-59159","https://github.com/SillyTavern/SillyTavern/commit/d134abd50e4a416e3b81233242583b0a23f38320","https://docs.sillytavern.app/administration/#security-checklist","https://docs.sillytavern.app/administration/config-yaml/#host-whitelisting","https://github.com/SillyTavern/SillyTavern","https://github.com/SillyTavern/SillyTavern/releases/tag/1.13.4"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-7cxj-w27x-x78q","url":"https://osv.dev/vulnerability/GHSA-7cxj-w27x-x78q"}],"summary":"SillyTavern Web Interface Vulnerable DNS Rebinding"}