What’s Vulnerable › Products

microsoft prompty vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your microsoft prompty version is affected

Latest microsoft prompty vulnerabilities

• CVE-2026-73299 — Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer (CVSS 10.0)
• CVE-2026-53598 — Prompty: Arbitrary File Read via ${file:path} Reference Expansion (CVSS 7.5)
• CVE-2026-53597 — Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader (CVSS 8.7)