prompty
Prompty makes it easy to create, manage, debug, and evaluate LLM prompts for your AI applications. Prompty is an asset class and format for LLM prompts designed to enhance observability, understandability, and portability for developers.
View on Github
Activity
- Latest release
- 2w ago
- Total releases
- 53
- Cadence
- ~2 days
- Last 12 months
- 16
Reach
- Stars
- 1.3k
Details
- License
- MIT
- First release
- Jul 11, 2024
| Version | Released | |
|---|---|---|
2.0.3
patch
| ||
2.0.2
patch
| ||
2.0.1
patch
| ||
2.0.0
major
| ||
2.0.0b3
pre
| ||
2.0.0b2
pre
| ||
2.0.0b1
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a9
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a8
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a7
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a6
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a5
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a4
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a3
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a2
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
2.0.0a1
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
1.0.0b3
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
1.0.0b2
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
1.0.0b1
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
1.0.0a2
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
1.0.0a1
pre
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.50
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.49
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.48
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.47
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.46
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.45
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.44
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.40
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.39
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.38
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.37
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.36
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.34
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.33
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.24
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.23
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.22
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.21
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.20
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.19
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.18
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.17
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.16
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.15
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.14
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.13
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.12
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.10
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev | ||
0.1.9
patch
1 CVE
CVE-2026-53598
PYSEC-2026-3538
GHSA-wxhm-2mq7-7697
Jul 23, 2026
Prompty: Arbitrary file read via file reference expansion
7.5
/ 10
High
Network
Low
None
None
Unchanged
High
None
None
SummaryPrompty loaders expanded Affected packages
ImpactApplications that load untrusted RemediationUpgrade to the fixed runtime version for your ecosystem. The fix makes file references secure by default: Fix detailsThe patched runtimes canonicalize file-reference targets and allowed roots before reading referenced files, reject targets outside the prompt directory by default, and add regression coverage for traversal, absolute paths, explicit allowlists, and symlink escapes. The release commit is Affected versions
0.1.1
0.1.10
0.1.12
0.1.13
0.1.14
0.1.15
0.1.16
0.1.17
0.1.18
0.1.19
0.1.20
0.1.21
+ 35 more Show less
0.1.22
0.1.23
0.1.24
0.1.33
0.1.34
0.1.36
0.1.37
0.1.38
0.1.39
0.1.40
0.1.44
0.1.45
0.1.46
0.1.47
0.1.48
0.1.49
0.1.50
0.1.7
0.1.8
0.1.9
1.0.0a1
1.0.0a2
1.0.0b1
1.0.0b2
1.0.0b3
2.0.0a1
2.0.0a2
2.0.0a3
2.0.0a4
2.0.0a5
2.0.0a6
2.0.0a7
2.0.0a8
2.0.0a9
2.0.0b1
Fixed in
2.0.0b2
References
Updated Jul 23, 2026 · Source: OSV.dev |