Skip to content
OpenAdvisories

Vendor

MarceloTessaro

2 known vulnerabilities.

Products

promptcraft-forge-studio 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-58353

    Promptcraft Forge Studio: Complete Sanitizer Bypass Enables XSS via Overlapping Patterns

    Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as r`eplace(/javascript:/gi, '')`. Because the package uses mu…

    MarceloTessaro promptcraft-forge-studio