Skip to content
OpenAdvisories

Vendor

MarceloTessaro

2 known vulnerabilities.

Products

promptcraft-forge-studio 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-58361

    Promptcraft Forge Studio's incomplete URL check is vulnerable to XSS via SVG

    Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, b…

    MarceloTessaro promptcraft-forge-studio