CVE-2026-74792

creationtimestamp| type| source ---|---|--- 2026-08-16 14:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ia225wzdzklr5 2026-08-16 15:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt7hcyo74a2t...

CVE-2026-74792 Scriban before 7.0.0 Stack Overflow via nested array initializers

Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...