CVE-2026-53597
1 advisory.
npm/@prompty/core CVE-2026-53597: high
Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader
Action: Upgrade @prompty/core to 2.0.0-beta.3 or later.
npm i @prompty/core@2.0.0-beta.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-alpha.1 | 2.0.0-beta.3 | - |
Fixed versions
| 2.0.0-beta.3 |
Sources
- osv: GHSA-c4gh-rv8h-q9vw
- https://github.com/microsoft/prompty/security/advisories/GHSA-c4gh-rv8h-q9vw
- https://nvd.nist.gov/vuln/detail/CVE-2026-53597
- https://github.com/microsoft/prompty/commit/c27402da2487075be577f06aa79df627fb9d6853
- https://github.com/microsoft/prompty
CVE-2026-53597 · published · modified · JSON