Microsoft Prompty

3 CVEs affecting Microsoft Prompty. Latest disclosed: 2026-08-12. Critical: 1, High: 1.

Top CVEs affecting Microsoft Prompty
CVESeverityScorePublishedSummary
CVE-2026-73299Critical10.02026-08-12Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty te…
CVE-2026-53598High7.52026-07-16Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 2.0.0-beta.2, Prompty loaders expanded ${file:...} references in .prompty frontmatter wi…
CVE-2026-535972026-07-16Prompty is a markdown file format (.prompty) for LLM prompts. From 2.0.0-alpha.1 until 2.0.0-beta.3, the @prompty/core TypeScript loader in runtime/typescript/…