GHSA-w28w-gp39-m4p6: Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
Summary
The @prompty/core Nunjucks renderer (a template engine for the Prompty framework) had a critical vulnerability where it could execute arbitrary JavaScript code when processing untrusted template files. An attacker could use special template syntax to access internal JavaScript properties and run malicious code on the server.
Solution / Mitigation
Upgrade @prompty/core to version 2.0.0-beta.5 or later. The patch sanitizes template inputs to only allow own-data values, blocks access to constructor and prototype properties, and prevents template function calls while preserving normal template features like variable substitution, conditionals, and loops.
Classification
Affected Vendors
Affected Packages
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://github.com/advisories/GHSA-w28w-gp39-m4p6
First tracked: July 24, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 92%