https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 13:56:47 +0000 https://cve.radiocsirt.org/vuln/cve-2026-34524 <p><strong>Affected:</strong> SillyTavern</p> <p>SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in chat endpoints allows an authenticated attacker to read and delete arbitrary files under their user data root (for example secrets.json and settings.json) by supplying avatar_url=&#34;..&#34;. This issue has been patched in version 1.17.0.</p> <p><strong>Affected:</strong> SillyTavern</p> <p>SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. Prior to version 1.17.0, a path traversal vulnerability in chat endpoints allows an authenticated attacker to read and delete arbitrary files under their user data root (for example secrets.json and settings.json) by supplying avatar_url=&#34;..&#34;. This issue has been patched in version 1.17.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-34524