CVE-2025-58353 Details
Description
Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications. All versions of Promptcraft Forge Studio sanitize user input using regex blacklists such as r`eplace(/javascript:/gi, '')`. Because the package uses multi-character tokens and each replacement is applied only once, removing one occurrence can create a new dangerous token due to overlap. The “sanitized” value may still contain an executable payload when used in href/src (or injected into the DOM). There is currently no fix for this issue.
A cross-site scripting (XSS) vulnerability exists in all versions of Promptcraft Forge Studio, a toolkit for managing LLM-powered applications. The issue arises from the application's input sanitization process, which employs regex blacklists to remove potentially harmful content. However, this method is flawed, as it only removes one occurrence of a multi-character token at a time. This can create overlapping patterns that allow executable payloads to persist, particularly when the sanitized output is used in href or src attributes, or injected into the DOM.
Users are advised to employ a reliable sanitization library, such as DOMPurify for browser applications or sanitize-html for Node.js environments. If regex-based sanitization is preferred, it is important to repeatedly apply the replacements until the string no longer changes, or to switch to character-level filtering. Additionally, untrusted strings should not be passed to dangerouslySetInnerHTML, and safe URLs should be whitelisted when creating href or src values.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 4, 2025CISA-ADP
Assessed Sep 4, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MarceloTessaro/promptcraft-forge-studio/security/advisories/GHSA-mv25-7v95-q3pf | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-184 | Incomplete List of Disallowed Inputs | [email protected] |
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Mathharo Promptcraft Forge Studio | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 4, 2025 | New CVE Received | [email protected] |