HIGH7.5PyPInpmcrates.ioNuGet
GHSA-wxhm-2mq7-7697· CVE-2026-53598, PYSEC-2026-3538Prompty: Arbitrary file read via file reference expansion
Modified: 7/31/2026
package
npm/@prompty/core
pkg:npm/%40prompty/core
HIGHnpm
GHSA-c4gh-rv8h-q9vw· CVE-2026-53597Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
Modified: 7/17/2026
CRITICAL10.0npm
GHSA-w28w-gp39-m4p6· CVE-2026-73299Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Modified: 8/13/2026