High severity vulnerabilities about sillytavern HOT 3 CLOSED

No, there's nothing you can do until the advisory for an external library is closed. I don't have control over this process, neither can provide any timelines for when it will be done.
This notification will be present on any software that utilizes xml2js in any of the dependent packages, including the main Tavern and any of the forks. Also, Tavern doesn't directly use XML parsing in any of the parts of the code.
Your IP, API keys, privacy, etc. will be safe, just follow the guidelines.

from sillytavern.

This is a parent issue, you can track the progress of its resolution here: Leonidas-from-XIV/node-xml2js#663

from sillytavern.

The parent issue is closed. I updated the dependencies and now the vulnerability notice is gone.

from sillytavern.