VYPR

promzard

by Npm

npm: promzard

CVEs (1)

  • CVE-2026-127109Nov 12, 2026
    risk 0.00cvss —epss —

    A code injection vulnerability in promzard’s template-loading functionality allows an attacker who can control property names in the context object (ctx) to execute arbitrary code with the privileges of the Node.js process. The library inserts context property names into a…