Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-74795
  • github.com/scriban/scriban
 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74794
  • github.com/scriban/scriban
 Scriban before 6.6.0 Denial of Service via Infinite Recursion 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74792
  • github.com/scriban/scriban
 Scriban before 7.0.0 Stack Overflow via nested array initializers 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74791
  • github.com/scriban/scriban
 Scriban before 7.0.0 Authorization Bypass via Stale Include Cache 16 Aug
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-74790
  • github.com/scriban/scriban
 Scriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache 16 Aug
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-74789
  • github.com/scriban/scriban
 Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74788
  • github.com/scriban/scriban
 Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74787
  • github.com/scriban/scriban
 Scriban before 7.0.0 Uncontrolled Recursion via object.to_json 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74786
  • github.com/scriban/scriban
 Scriban before 7.0.0 Denial of Service via Unbounded Template Output 16 Aug
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-74785
  • github.com/scriban/scriban
 Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption 16 Aug
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-74784
  • github.com/scriban/scriban
 Scriban before 7.2.0 Denial of Service via array.insert_at 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-74783
  • github.com/scriban/scriban
 Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-73062
  • github.com/scriban/scriban
 Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication 16 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-73061
  • github.com/scriban/scriban
 Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor 16 Aug
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-73060
  • github.com/scriban/scriban
 Scriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.Multiply 16 Aug
  • Fix available
  • Severity - 8.7 (High)
GHSA-7jvp-hj45-2f2m
  • NuGet/Scriban
 Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter Bypass) 06 Jul
  • Fix available
  • Severity - 7.7 (High)
Load more...