CVE-2025-59159Published
SillyTavern Web Interface Vulnerable to DNS Rebinding
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-59159 · Microsoft / collected KEV context
cve-program · CVE-2025-59159
- https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-7cxj-w27x-x78q
- https://github.com/SillyTavern/SillyTavern/commit/d134abd50e4a416e3b81233242583b0a23f38320
- https://docs.sillytavern.app/administration/#security-checklist
- https://docs.sillytavern.app/administration/config-yaml/#host-whitelisting
- https://github.com/SillyTavern/SillyTavern/releases/tag/1.13.4
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.