CVE-2026-74791

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74791
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74791.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74791
Aliases
Published
2026-08-16T13:14:15Z
Modified
2026-10-28T02:30:43Z
Severity
  • 9.2 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator
Summary
Scriban before 7.0.0 Authorization Bypass via Stale Include Cache
Details

Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously authorized template content from earlier renders without triggering TemplateLoader.Load() again.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-226"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74791.json"
}
References

Affected packages

Git / github.com/scriban/scriban

Affected ranges

Type
GIT
Repo
https://github.com/scriban/scriban
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
25d148a104dd4d679a1a1932442616599e003c2f
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "7.0.0"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StandardRange"
        },
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "7.0.0"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

Affected versions

2.*
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
3.*
3.0.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.1.0
3.2.0
3.2.1
3.2.2
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.4.1
3.4.2
3.5.0
3.6.0
3.7.0
3.8.0
3.8.1
3.8.2
3.9.0
4.*
4.0.0
4.0.1
4.0.2
4.1.0
5.*
5.0.0
5.1.0
5.10.0
5.11.0
5.12.0
5.12.1
5.2.0
5.3.0
5.4.0
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.5.0
5.5.1
5.5.2
5.6.0
5.7.0
5.8.0
5.9.0
5.9.1
6.*
6.0.0
6.1.0
6.2.0
6.2.1
6.3.0
6.4.0
6.5.0
6.5.1
6.5.2
6.5.3
6.5.4
6.5.5
6.5.6
6.5.7
6.5.8
6.6.0
v0.*
v0.1.0
v0.10.0
v0.11.0
v0.12.0
v0.12.1
v0.13.0
v0.14.0
v0.15.0
v0.16.0
v0.2.0
v0.2.1
v0.2.2
v0.3.0
v0.3.1
v0.4.0
v0.5.0
v0.6.0
v0.7.0
v0.9.0
v0.9.1
v1.*
v1.0.0
v1.0.0-beta-001
v1.0.0-beta-002
v1.0.0-beta-003
v1.0.0-beta-004
v1.0.0-beta-005
v1.0.0-beta-006
v1.1.0
v1.1.1
v1.2.0
v1.2.1
v1.2.2
v1.2.3
v1.2.4
v1.2.5
v1.2.6
v1.2.7
v1.2.8
v1.2.9
v2.*
v2.0.0
v2.0.0-alpha-001
v2.0.0-alpha-002
v2.0.0-alpha-003
v2.0.0-alpha-004
v2.0.0-alpha-005
v2.0.0-alpha-006
v2.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74791.json"