Microsoft prompty

• CVE-2026-73299 Critical 10.0 Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer 1.8%
• CVE-2026-53598 High 7.5 Prompty: Arbitrary File Read via ${file:path} Reference Expansion 1.3%
• CVE-2026-53597 High 8.7 Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader 1.0%