TavernKeeper Scan Report

mechamarmot/SillyTavern-PyRunner

Commit 78d8f55 Reviewed Aug 5, 2026

6 material concerns identified.

This advisory report describes what the named tools and contextual reviewer found at one exact commit. Unknown or unobserved behavior may still exist.

0 high 6 material 26 low

What this review found

Dependency advisory GHSA-3ppc-4f35-3m26 applies

Material concern · medium confidence

A library used by this project has a known security flaw. Updating the library to a fixed version is recommended.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3ppc-4f35-3m26 to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory for a declared dependency in the package-lock.json. The vulnerable package is part of the project's dependency tree.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version as specified in the advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3ppc-4f35-3m26
File role: production
Source: package-lock.json

Dependency advisory GHSA-mh99-v99m-4gvg applies

Material concern · medium confidence

A library used by this project has a known security flaw. Updating the library to a fixed version is recommended.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-mh99-v99m-4gvg to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory for a declared dependency in the package-lock.json. The vulnerable package is part of the project's dependency tree.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version as specified in the advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-mh99-v99m-4gvg
File role: production
Source: package-lock.json

Dependency advisory GHSA-c2c7-rcm5-vvqj applies

Material concern · medium confidence

A library used by this project has a known security flaw. Updating the library to a fixed version is recommended.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-c2c7-rcm5-vvqj to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory for a declared dependency in the package-lock.json. The vulnerable package is part of the project's dependency tree.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version as specified in the advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-c2c7-rcm5-vvqj
File role: production
Source: package-lock.json

Dependency advisory GHSA-48c2-rrv3-qjmp applies

Material concern · medium confidence

A library used by this project has a known security flaw. Updating the library to a fixed version is recommended.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-48c2-rrv3-qjmp to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory for a declared dependency in the package-lock.json. The vulnerable package is part of the project's dependency tree.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version as specified in the advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-48c2-rrv3-qjmp
File role: production
Source: package-lock.json

Dependency advisory GHSA-38r7-794h-5758 applies

Material concern · medium confidence

A library used by this project has a known security flaw. Updating the library to a fixed version is recommended.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-38r7-794h-5758 to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory for a declared dependency in the package-lock.json. The vulnerable package is part of the project's dependency tree.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version as specified in the advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-38r7-794h-5758
File role: production
Source: package-lock.json

Dependency advisory GHSA-rgw5-rvv9-x895 applies

Material concern · medium confidence

A library used by this project has a known security flaw. Updating the library to a fixed version is recommended.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-rgw5-rvv9-x895 to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory for a declared dependency in the package-lock.json. The vulnerable package is part of the project's dependency tree.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version as specified in the advisory.

Scanner: osv-scanner 2.4.0
Rule: GHSA-rgw5-rvv9-x895
File role: production
Source: package-lock.json

Minor cautions

Dependency advisory GHSA-v6h2-p8h4-qcjw applies

Minor caution · medium confidence

A tool flagged a known security issue in one of the packages used to build this extension. Since this appears to be a build-time helper package rather than something that runs when users install the extension, the practical risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v6h2-p8h4-qcjw to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory against a dependency declared in package-lock.json. The lockfile shows only React and React-DOM as production dependencies; all other visible packages are devDependencies used for building (Babel, Webpack, Playwright, ESLint). Dev-dependency vulnerabilities in build tooling do not ship to end users of the built extension. Without the specific package identity, the most likely impact is build-time only.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package and update it to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v6h2-p8h4-qcjw
File role: production
Source: package-lock.json

Dependency advisory GHSA-4x5r-pxfx-6jf8 applies

Minor caution · medium confidence

A known security issue was found in a build-tool package. This package is used during development and does not run when end users install the extension, so the risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-4x5r-pxfx-6jf8 to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory against a dependency in the lockfile. The project's production dependencies are limited to React and React-DOM; the remaining visible dependency tree consists of devDependencies for build and test tooling. Vulnerabilities in dev-only packages do not propagate to the shipped extension bundle.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package and update it to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-4x5r-pxfx-6jf8
File role: production
Source: package-lock.json

Dependency advisory GHSA-fv7c-fp4j-7gwp applies

Minor caution · medium confidence

A serious-sounding security issue was flagged in a package used by this project. However, most packages in this project are used only for building the extension, not for running it, so the actual risk to users is likely low. The developer should still investigate and update.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-fv7c-fp4j-7gwp to a dependency declared by this repository.

Contextual assessment: OSV-Scanner flagged a high-severity advisory for a dependency in the lockfile. Despite the high scanner severity, the lockfile structure shows the project ships only React and React-DOM as production dependencies, with all other packages being devDependencies for build tooling. If the flagged package is a dev dependency, the high severity does not translate to runtime risk for extension users. If it is a transitive dependency of React, the impact would depend on whether the vulnerable code path is reachable in the extension's usage.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package. If it is a production dependency, update immediately; if dev-only, update during the next maintenance cycle.

Scanner: osv-scanner 2.4.0
Rule: GHSA-fv7c-fp4j-7gwp
File role: production
Source: package-lock.json

Dependency advisory GHSA-qj8w-gfj5-8c6v applies

Minor caution · medium confidence

A moderate security issue was found in a build or test package. Since these packages are not included when users install the extension, the risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-qj8w-gfj5-8c6v to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a medium-severity advisory against a lockfile dependency. The project's production dependency surface is limited to React and React-DOM; the rest of the visible tree is build and test tooling. A medium-severity issue in a dev-only package has minimal practical impact on the shipped extension.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package and update it to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-qj8w-gfj5-8c6v
File role: production
Source: package-lock.json

Dependency advisory GHSA-5c6j-r48x-rmvq applies

Minor caution · medium confidence

A serious security issue was flagged in a package used by this project. Most packages here are build tools that do not run for end users, so the actual risk is likely low. The developer should still investigate and update.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-5c6j-r48x-rmvq to a dependency declared by this repository.

Contextual assessment: OSV-Scanner flagged a high-severity advisory for a lockfile dependency. The lockfile shows the project's production dependencies are React and React-DOM only, with all other visible packages marked as devDependencies. If the flagged package is in the dev tree, the high severity is scoped to the build environment and does not affect end users of the built extension bundle.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package. If it is a production dependency, update immediately; if dev-only, update during the next maintenance cycle.

Scanner: osv-scanner 2.4.0
Rule: GHSA-5c6j-r48x-rmvq
File role: production
Source: package-lock.json

Dependency advisory GHSA-xxjr-mmjv-4gpg applies

Minor caution · medium confidence

A moderate security issue was found in a build or test package. These packages are not included when users install the extension, so the risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-xxjr-mmjv-4gpg to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a medium-severity advisory against a lockfile dependency. The project ships only React and React-DOM as production dependencies; remaining packages are devDependencies for build and test tooling. A medium-severity vulnerability in a dev-only package does not affect the shipped extension.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package and update it to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-xxjr-mmjv-4gpg
File role: production
Source: package-lock.json

Dependency advisory GHSA-v2hh-gcrm-f6hx applies

Minor caution · medium confidence

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v2hh-gcrm-f6hx to a dependency declared by this repository.

Contextual assessment: OSV-Scanner flagged a high-severity advisory for a lockfile dependency. The lockfile structure shows production dependencies are limited to React and React-DOM, with all other visible packages being devDependencies. If the flagged package is a dev dependency, the high severity applies only to the build environment, not to the extension's runtime behavior for end users.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package. If it is a production dependency, update immediately; if dev-only, update during the next maintenance cycle.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v2hh-gcrm-f6hx
File role: production
Source: package-lock.json

Dependency advisory GHSA-f23m-r3pf-42rh applies

Minor caution · medium confidence

A moderate security issue was found in a build or test package. These packages are not included when users install the extension, so the risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-f23m-r3pf-42rh to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a medium-severity advisory against a lockfile dependency. The project's production dependencies are React and React-DOM only; all other visible packages are devDependencies for build and test tooling. A medium-severity issue in a dev-only package has minimal impact on the shipped extension.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific package and update it to a patched version.

Scanner: osv-scanner 2.4.0
Rule: GHSA-f23m-r3pf-42rh
File role: production
Source: package-lock.json

Dependency advisory GHSA-25h7-pfq9-p65f applies

Minor caution · medium confidence

A known security issue was found in one of the packages this extension uses. Since this is a tool installed and run locally on your own machine, and the affected package is likely a development or build tool rather than something exposed to the internet, the practical risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-25h7-pfq9-p65f to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a known advisory against a declared dependency in the lockfile. The project's production dependencies are limited to react and react-dom, with the remaining dependencies being build and test tooling (babel, webpack, playwright, eslint). For a locally-installed SillyTavern extension, vulnerable build-time dependencies present minimal runtime attack surface. The advisory package identity was redacted, preventing precise impact determination.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-25h7-pfq9-p65f
File role: production
Source: package-lock.json

Dependency advisory GHSA-2g4f-4pwh-qvx6 applies

Minor caution · medium confidence

A medium-level security issue was found in one of the extension's dependency packages. Because the extension runs locally and the affected package is likely a build tool, the real-world risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-2g4f-4pwh-qvx6 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a medium-severity advisory against a declared dependency. The lockfile shows standard React build tooling dependencies. Medium-severity advisories in build or test dependencies for a local extension have limited practical exploitability. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-2g4f-4pwh-qvx6
File role: production
Source: package-lock.json

Dependency advisory GHSA-v39h-62p7-jpjc applies

Minor caution · medium confidence

A high-severity known vulnerability was found in a dependency package. However, since this extension runs on your local machine and the affected package is most likely a development tool, the practical danger is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-v39h-62p7-jpjc to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a declared dependency. The lockfile structure shows React and build-tool dependencies. Without the specific package identity, the most likely affected packages are build-time tools. High-severity advisories in dev dependencies for a locally-run extension still present limited runtime risk. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-v39h-62p7-jpjc
File role: production
Source: package-lock.json

Dependency advisory GHSA-h67p-54hq-rp68 applies

Minor caution · medium confidence

A medium-level security issue was found in a dependency. For a locally-installed extension, this is low risk in practice.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-h67p-54hq-rp68 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a medium-severity advisory against a declared dependency. The project's dependency tree consists of React runtime packages and standard build tooling. Medium advisories in this context for a local extension present low practical risk. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-h67p-54hq-rp68
File role: production
Source: package-lock.json

Dependency advisory GHSA-q3j6-qgpj-74h6 applies

Minor caution · medium confidence

A high-severity vulnerability was found in a dependency package. Since the extension runs locally and the affected package is likely a build tool, the practical risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-q3j6-qgpj-74h6 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a declared dependency. The lockfile shows React and standard build tooling dependencies. For a local SillyTavern extension, high-severity advisories in build-time dependencies have limited runtime exploitability. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-q3j6-qgpj-74h6
File role: production
Source: package-lock.json

Dependency advisory GHSA-23c5-xmqv-rm74 applies

Minor caution · medium confidence

A high-severity known issue was found in a dependency. Because this is a local extension and the affected package is likely a development tool, the real-world risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-23c5-xmqv-rm74 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a declared dependency. The project dependencies are React runtime and standard build tooling. For a locally-installed extension, the runtime attack surface for build dependency vulnerabilities is minimal. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-23c5-xmqv-rm74
File role: production
Source: package-lock.json

Dependency advisory GHSA-3jxr-9vmj-r5cp applies

Minor caution · medium confidence

A high-severity vulnerability was found in a dependency. For a locally-run extension with build-time dependencies, the practical risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3jxr-9vmj-r5cp to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a declared dependency. The lockfile contains React and build-tool dependencies. High-severity advisories in dev or build dependencies for a local extension present limited practical risk. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3jxr-9vmj-r5cp
File role: production
Source: package-lock.json

Dependency advisory GHSA-7p8r-x3mc-p8w7 applies

Minor caution · medium confidence

A high-severity known vulnerability was found in a dependency package. Since the extension runs locally and the affected package is likely a build tool, the practical risk is low.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-7p8r-x3mc-p8w7 to a dependency declared by this repository.

Contextual assessment: OSV-scanner matched a high-severity advisory against a declared dependency. The project's dependency tree consists of React runtime packages and standard build tooling. For a local SillyTavern extension, build dependency vulnerabilities have minimal runtime exposure. The advisory package identity was redacted.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit and update affected dependencies to patched versions.

Scanner: osv-scanner 2.4.0
Rule: GHSA-7p8r-x3mc-p8w7
File role: production
Source: package-lock.json

Dependency advisory GHSA-7r86-cg39-jmmj applies

Minor caution · medium confidence

A security scanner found a known bug in one of the tools used to build this extension. Since it is a build tool rather than something that runs when you use the extension, it is unlikely to affect users.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-7r86-cg39-jmmj to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-7r86-cg39-jmmj) against a declared dependency in the lockfile. The root project declares only react and react-dom as production dependencies; all other listed packages are devDependencies used for building and testing. Vulnerable dependencies in build tooling for a hobbyist SillyTavern extension do not flow into the shipped extension runtime and are not exploitable by end users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-7r86-cg39-jmmj
File role: production
Source: package-lock.json

Dependency advisory GHSA-rf6f-7fwh-wjgh applies

Minor caution · medium confidence

A security scanner found a known bug in a development tool listed in this project. Because it is only used during development, it is unlikely to affect people using the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-rf6f-7fwh-wjgh to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-rf6f-7fwh-wjgh) against a declared dependency in the lockfile. The project's production dependencies are limited to react and react-dom; remaining packages are devDependencies for build and test infrastructure. A vulnerable build-time dependency does not introduce a runtime attack surface for extension users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-rf6f-7fwh-wjgh
File role: production
Source: package-lock.json

Dependency advisory GHSA-8fgc-7cc6-rx7x applies

Minor caution · medium confidence

A security scanner found a minor known issue in one of the project's development tools. It is low severity and unlikely to affect users of the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-8fgc-7cc6-rx7x to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-8fgc-7cc6-rx7x) with low severity against a declared dependency in the lockfile. The advisory severity is low and the dependency is part of the build or test toolchain rather than the shipped extension runtime.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-8fgc-7cc6-rx7x
File role: production
Source: package-lock.json

Dependency advisory GHSA-r5fr-rjxr-66jc applies

Minor caution · medium confidence

A security scanner found a known bug in a development tool used by this project. Since it is a build tool, it is unlikely to affect people using the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-r5fr-rjxr-66jc to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-r5fr-rjxr-66jc) against a declared dependency in the lockfile. The root project's production dependencies are react and react-dom only; the remaining packages are devDependencies for build and test. A vulnerable build-time dependency does not create a runtime attack surface for extension end users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-r5fr-rjxr-66jc
File role: production
Source: package-lock.json

Dependency advisory GHSA-3v7f-55p6-f55p applies

Minor caution · medium confidence

A security scanner found a known issue in a development tool listed in this project. Because it is only used during development, it is unlikely to affect people using the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-3v7f-55p6-f55p to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-3v7f-55p6-f55p) with medium severity against a declared dependency in the lockfile. The project's production dependencies are limited to react and react-dom; other packages are devDependencies for build and test infrastructure. A vulnerable build-time dependency does not introduce a runtime attack surface for extension users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-3v7f-55p6-f55p
File role: production
Source: package-lock.json

Dependency advisory GHSA-4c8g-83qw-93j6 applies

Minor caution · medium confidence

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-4c8g-83qw-93j6 to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-4c8g-83qw-93j6) against a declared dependency in the lockfile. The root project declares only react and react-dom as production dependencies; all other listed packages are devDependencies for building and testing. A vulnerable build-time dependency does not flow into the shipped extension runtime and is not exploitable by end users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-4c8g-83qw-93j6
File role: production
Source: package-lock.json

Dependency advisory GHSA-f886-m6hf-6m8v applies

Minor caution · medium confidence

A security scanner found a known issue in a development tool used by this project. Because it is only used during development, it is unlikely to affect people using the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-f886-m6hf-6m8v to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-f886-m6hf-6m8v) with medium severity against a declared dependency in the lockfile. The project's production dependencies are limited to react and react-dom; remaining packages are devDependencies for build and test infrastructure. A vulnerable build-time dependency does not introduce a runtime attack surface for extension users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-f886-m6hf-6m8v
File role: production
Source: package-lock.json

Dependency advisory GHSA-52cp-r559-cp3m applies

Minor caution · medium confidence

A security scanner found a known bug in a development tool used by this project. Since it is a build tool, it is unlikely to affect people using the extension.

Technical evidence

Scanner reason: OSV-Scanner matched advisory GHSA-52cp-r559-cp3m to a dependency declared by this repository.

Contextual assessment: OSV-Scanner matched a known advisory (GHSA-52cp-r559-cp3m) against a declared dependency in the lockfile. The root project's production dependencies are react and react-dom only; the remaining packages are devDependencies for build and test. A vulnerable build-time dependency does not create a runtime attack surface for extension end users.

Impact: low · Exploitability: unlikely

Developer action: Update the affected dependency to a patched version when convenient.

Scanner: osv-scanner 2.4.0
Rule: GHSA-52cp-r559-cp3m
File role: production
Source: package-lock.json

Expected scanner matches (1)

OpenGrep reported tavernkeeper.persistence.startup-modification

Expected behavior · high confidence

This extension runs Python code on your computer. When it starts up, it creates a default Python environment folder if one does not exist, and it installs a helper plugin into SillyTavern so it can run Python code in server mode. Both of these actions are clearly described in the project's documentation and are necessary for the extension to work as advertised. The extension shows a prominent warning that running Python code on your machine is dangerous, which is accurate and appropriate.

Technical evidence

Scanner reason: OpenGrep matched static-analysis rule tavernkeeper.persistence.startup-modification in this repository.

Contextual assessment: The scanner flagged startup persistence modification. The relevant startup behaviors are: (1) the embedded server plugin's init function calls ensureDefaultVenv(), which creates a Python virtual environment directory on disk if it does not already exist, and (2) the extension auto-installs the server plugin by writing its source to the SillyTavern plugins directory via the Files API. Both behaviors are consistent with the project's stated purpose of executing Python code locally with venv support. The server plugin source is embedded as a visible string constant in the bundle, not obfuscated. The README explicitly discloses auto-installation ('The server plugin installs automatically when you enable the extension') and prominently warns that server mode executes code with full machine access. The venv creation is a normal operational requirement for the venv management feature. No concealed execution, credential exfiltration, or hidden network destinations are present.

Impact: low · Exploitability: unlikely

Developer action: none

Scanner: opengrep 1.26.0
Rule: tavernkeeper.persistence.startup-modification
File role: generated
Source: dist/index.js:1

Related contextual observations

Multiple dependency advisories in build tooling for a local extension

low risk · medium confidence

The scanner found several known security issues in the packages this extension depends on. Most of these packages are development and build tools rather than parts that run when you use the extension. Since the extension is installed and used locally on your own machine, these issues are unlikely to pose a real-world threat. Updating the dependencies is still good practice.

Technical assessment

All eight OSV-scanner candidates are known-vulnerability matches against the lockfile. The project's production dependencies are react and react-dom, with devDependencies comprising babel, webpack, playwright, eslint, and terser. These are standard build and test tools for a React-based SillyTavern extension. The extension runs locally within SillyTavern and its primary capability (Python code execution) is explicitly disclosed and user-gated. Dependency vulnerabilities in build tooling present minimal runtime attack surface for a locally-installed extension. The advisory package identities were redacted from the scanner output, preventing precise per-advisory impact analysis, but the overall dependency profile is consistent with standard frontend build tooling.

Impact: low · Exploitability: unlikely

Developer action: Run npm audit to identify the specific packages and versions affected, then update them to patched versions. Consider adding npm audit to CI to catch future advisories.

Sources:

package-lock.json:1-24

Coverage and limitations

Inventory: 13 files · 640004 bytes
Contextual coverage: 31 of 31 candidates assessed

Tools

inventory 0.1.0 — completed
tavernkeeper-static 3 — completed
gitleaks 8.30.1 — completed
opengrep 1.26.0 — completed
osv-scanner 2.4.0 — completed
zizmor 1.28.0 — not-applicable
malcontent 1.25.7 — not-applicable

Limitations

This advisory review cannot prove the absence of unknown behavior.

Technical scan identity

Full commit: 78d8f55eb22b5892bd2d76d090fb9f19f1f83fb9
Completed: Aug 5, 2026
History depth: 20 commits
Method: Deterministic evidence with contextual review
Reviewer: nano-gpt.com · zai-org/glm-5.2:thinking
Scanner: 0.1.0
Scanner policy: 3
Rule catalog: 1
Contextual policy: 1
Ecosystem context: sillytavern-community-v1
Prompt: contextual-review-v1
Assessment schema: contextual-assessment-v1
Review usage: 83601 input · 19581 output · 4070 cache read · 0 reasoning tokens
Report: 8c6fd5d36745a095af5c58385aa13fdda0af5de60ba2d80275566c3e285714c8