promptcraft-forge-studio vulnerabilities

2 known vulnerabilities in promptcraft-forge-studio from MarceloTessaro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered…

  CVE-2025-58361Sep 4, 2025MarceloTessaro

  Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, bu

• 8.2 High severity

  Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered…

  CVE-2025-58353Sep 4, 2025MarceloTessaro

  Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as r`eplace(/javascript:/gi, '')`. Because the package uses mul