microsoft prompty vulnerabilities
3 published CVEs name microsoft prompty among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-73299
Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
microsoft · prompty
Critical10.0 - CVE-2026-53598
Prompty: Arbitrary File Read via ${file:path} Reference Expansion
microsoft · prompty
High7.5 - CVE-2026-53597
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
microsoft · prompty
High8.7