3 matches found
Allocation of Resources Without Limits or Throttling
Overview Scriban is a Scriban is a fast, powerful, safe and lightweight scripting language and engine for .NET, which was primarily developed for text templating with a compatibility mode for parsing liquid templates. Today, not only Scriban can be used in text templating scenarios, but also can ...
CVE-2026-73062
creationtimestamp| type| source ---|---|--- 2026-08-16 17:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt7nzk2ogf22...
CVE-2026-73062
The CVE-2026-73062 entry affects Scriban 3.0.0 through 7.2.0, where the array multiplication operator allocates memory without enforcing LoopLimit or overflow-safe checks. An attacker can supply a large integer multiplier in a template to trigger multi-gigabyte memory allocations, leading to reso...