Description
The TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype properties to execute JavaScript in the host Node.js process.
Recommendation
Update the @prompty/core package to the latest compatible version. Followings are version details:
Affected version(s): **>= 2.0.0-alpha.1, <= 2.0.0-beta.4 <= 0.1.4** Patched version(s): **2.0.0-beta.5 0.1.5**
References
Could your website be exposed too?
SmartScanner can check your website for Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin - CVE-2023-22621
- @saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defst - Vulnerability
- Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability - CVE-2026-41264
- Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability - flowise-components - CVE-2026-70477
You might also like:
See something that needs correcting? Let us knowUpdated July 24, 2026