GHSA-xc4x-2452-5gc9

Suggest an improvement
Source
https://github.com/advisories/GHSA-xc4x-2452-5gc9
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-xc4x-2452-5gc9/GHSA-xc4x-2452-5gc9.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-xc4x-2452-5gc9
Aliases
Published
2026-05-12T22:23:56Z
Modified
2026-06-09T10:45:18Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
SillyTavern has a reflected XSS vulnerability in the CORS proxy middleware
Details

Resolution

Fixed in SillyTavern 1.18.0: a user-provided URL is no longer reflected in the HTTP response body.

Overview

  • Vulnerability Type: XSS
  • Affected Location: src/middleware/corsProxy.js:40
  • Trigger Scenario: reflected XSS in CORS proxy error response

Root Cause

When fetch(url) throws, the code sends: res.status(500).send('Error occurred while trying to proxy to: ' + url + ' ' + error). The url value is attacker-controlled (req.params.url) and is not HTML-escaped before rendering.

Source-to-Sink Chain

  1. Source (user-controlled input)
  • Entry point: GET /proxy/:url(*)
  1. Data flow
  • Code analysis shows concrete propagation into this sink:
    • vulnerability title: Reflected XSS in CORS proxy error response
    • sink location reached by attacker-controlled input: src/middleware/corsProxy.js:40
  • The same sink behavior is confirmed by controlled execution observations.
  1. Sink (dangerous operation)
  • Sink location: src/middleware/corsProxy.js:40
  • Vulnerable behavior: reflected XSS in CORS proxy error response

Exploitation Preconditions

  1. The attacker can inject controllable content into a rendered response.
  2. The vulnerable rendering context does not apply strict output encoding/sanitization.
  3. A victim user opens the affected page or response.

Risk

This issue enables script execution in the victim context and can compromise session or data integrity.

Impact

An attacker may run arbitrary JavaScript in the victim context, steal tokens, and manipulate user-visible behavior.

Remediation

  1. Never concatenate raw user input into HTML error responses.
  2. If URL echo is required, HTML-escape it or force plain-text output.
  3. Re-enable/strengthen CSP to reduce reflected injection impact.
Database specific 
{
    "cwe_ids": [
        "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-05-12T22:23:56Z",
    "nvd_published_at": "2026-05-29T19:16:24Z",
    "severity": "MODERATE"
}
References

Affected packages

npm / sillytavern

Package

Name
sillytavern
View open source insights on deps.dev
Purl
pkg:npm/sillytavern

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.0

Database specific

last_known_affected_version_range 
"<= 1.17.0"
source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-xc4x-2452-5gc9/GHSA-xc4x-2452-5gc9.json"