microsoft prompty vulnerabilities

3 published CVEs name microsoft prompty among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 3
Critical: 1
Known exploited: 0

Critical 1High 2Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-73299
Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
microsoft · prompty
Critical10.0
CVE-2026-53598
Prompty: Arbitrary File Read via ${file:path} Reference Expansion
microsoft · prompty
High7.5
CVE-2026-53597
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
microsoft · prompty
High8.7

Most common weaknesses