Arbitrary Code Injection

Overview @prompty/core is a Prompty core package Affected versions of this package are vulnerable to Arbitrary Code Injection via the NunjucksRenderer in nunjucks.ts, which passes user-controlled inputs directly to env.renderString without restricting member access or function calls within the...