Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer

Summary

The TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype properties to execute JavaScript in the host Node.js process.

Affected packages

• npm @prompty/core versions `