Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-w28w-gp39-m4p6
  • npm/@prompty/core
 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer 24 Jul
  • Fix available
  • Severity - 10.0 (Critical)
GHSA-c4gh-rv8h-q9vw
  • npm/@prompty/core
 Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader 17 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-wxhm-2mq7-7697
  • NuGet/Prompty.Core
  • PyPI/prompty
  • crates.io/prompty
  • npm/@prompty/core
 Prompty: Arbitrary file read via file reference expansion 17 Jul
  • Fix available
  • Severity - 7.5 (High)