45 matches found
Arbitrary Code Injection
Overview @prompty/core is a Prompty core package Affected versions of this package are vulnerable to Arbitrary Code Injection via the NunjucksRenderer in nunjucks.ts, which passes user-controlled inputs directly to env.renderString without restricting member access or function calls within the...
CVE-2026-73299
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299
Summary: CVE-2026-73299 affects Prompty’s TypeScript Nunjucks renderer used for .prompty templates. Prior to versions 0.1.5 and 2.0.0-beta.5, untrusted .prompty template bodies were evaluated with unrestricted JavaScript member access, allowing an attacker-controlled template to traverse construc...
EUVD-2026-57382
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
CVE-2026-73299: Improper Control of Generation of Code
Prompty is a markdown file format .prompty for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype propertie...
GHSA-W28W-GP39-M4P6 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Summary The TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype properties to execute JavaScript in the host Node.js process. Affected packages - npm...
PT-2026-71197
Name of the Vulnerable Software and Affected Versions Prompty versions prior to 0.1.5 Prompty versions prior to 2.0.0-beta.5 Description The TypeScript Nunjucks renderer evaluates untrusted .prompty template bodies with unrestricted JavaScript member access. This allows an attacker to control a...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
MAL-2025-190662 Malicious code in @asyncapi/nunjucks-filters (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51137a75fbced2a0515e71df0b97baf386e784c2eb5134c77ed77afdcb48fe34 The package @asyncapi/nunjucks-filters was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198696
Malicious code in @asyncapi/nunjucks-filters npm...
MAL-2025-191161 Malicious code in ginfuru.better-nunjucks (VSCode:https://open-vsx.org)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c1f105a5bf6daf41b694f7cc339589ac86e57964dd2f761bc04b8ea20fe70ae8 This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...
EUVD-2018-0746
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2023-2142
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two...
CVE-2023-2142
A flaw was found in Nunjucks versions prior to 3.2.4. This vulnerability can allow attackers to inject cross-site scripting XSS payloads via bypassing autoescape functionality by using a backslash \ character when two user-controlled parameters are on the same line in the views...
CVE-2023-2142
In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two user-controlled parameters on the same line used in the views, it was possible to inject cross site scripting payloads using the backslash ...
DEBIAN-CVE-2023-2142
In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two user-controlled parameters on the same line used in the views, it was possible to inject cross site scripting payloads using the backslash ...
UBUNTU-CVE-2023-2142
In Nunjucks versions prior to version 3.2.4, it was possible to bypass the restrictions which are provided by the autoescape functionality. If there are two user-controlled parameters on the same line used in the views, it was possible to inject cross site scripting payloads using the backslash ...