HIGHnpm
GHSA-c4gh-rv8h-q9vw· CVE-2026-53597Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
Modified: 7/17/2026
package
pkg:npm/%40prompty/core
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
Modified: 7/17/2026
Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Modified: 8/13/2026
Prompty: Arbitrary file read via file reference expansion
Modified: 7/31/2026