Promptcraft Forge Studio
Approved changes feed: RSS · Atom
cpe:2.3:a:marcelotessaro:promptcraft-forge-studio:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Marcelotessaro (9d342e7b-3d01-5e65-9529-934a43793cc8) |
|---|---|
| Product | Promptcraft Forge Studio (a31deefd-6e08-5919-8159-cf46da03a2de) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58361 |
vulnerable | 2026-06-08 07:35:18.040132 |
Promptcraft Forge Studio's incomplete URL check is vulnerable to XSS via SVG
CRITICAL (9.3)
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions contain an non-exhaustive URL scheme check that does not protect against XSS. User-controlled URLs pass through src/utils/validation.ts, but the check only strips `javascript:` and a few patterns. `data:` URLs (for example data:image/svg+xml,…) still pass. If a sanitized value is used in href/src, an attacker can execute a script. There is currently no fix for this issue.
Published: 2025-09-04T19:43:43.852Z
Updated: 2025-09-04T20:07:02.787Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58353 |
vulnerable | 2026-06-08 07:35:18.025302 |
Promptcraft Forge Studio: Complete Sanitizer Bypass Enables XSS via Overlapping Patterns
HIGH (8.2)
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as r`eplace(/javascript:/gi, '')`. Because the package uses multi-character tokens and each replacement is applied only once, removing one occurrence can create a new dangerous token due to overlap. The “sanitized” value may still contain an executable payload when used in href/src (or injected into the DOM). There is currently no fix for this issue.
Published: 2025-09-04T19:39:23.567Z
Updated: 2025-09-04T20:13:09.147Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.