637912 matches found
CVE-2026-74789
Scriban before 7.0.0 affected = 6.6.0 applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression such as 1..1000000 | array.size — or a memory-amplification expression such as '...
CVE-2026-74789
Scriban before 7.0.0 (affected
CVE-2026-74788
CVE-2026-74788 affects Scriban before 7.0.0 (affected versions ≤ 6.6.0). The vulnerability resides in the template functions string.pad_left and string.pad_right , which do not validate the width parameter before delegating to .NET’s String.PadLeft/PadRight. An attacker can supply an extremely la...
CVE-2026-74787 Scriban before 7.0.0 Uncontrolled Recursion via object.to_json
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...
CVE-2026-74787 Scriban before 7.0.0 Uncontrolled Recursion via object.to_json
Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.tojson builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing objects to trigger unbounded recursion, causing a StackOverflowException that...
CVE-2026-74786
Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...
CVE-2026-74786
CVE-2026-74786 affects Scriban before 7.0.0 (versions
EUVD-2026-59951
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attacker...
CVE-2026-74785 Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attacker...
CVE-2026-74786 Scriban before 7.0.0 Denial of Service via Unbounded Template Output
Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...
CVE-2026-74786 Scriban before 7.0.0 Denial of Service via Unbounded Template Output
Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...
CVE-2026-74785
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attacker...
EUVD-2026-59952
Scriban before 7.0.0 affected versions = 6.6.0 contains a denial-of-service vulnerability in which the LimitToString safety limit default 1MB can be bypassed because ObjectToString resets the per-call length counter currentToStringLength on every top-level call and StringBuilderOutput enforces no...
CVE-2026-74785
Scriban before 7.0.0 contains three denial-of-service vulnerabilities in expression evaluation: unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attackers who can supply templates can trigger out-of-memory ...
CVE-2026-74785 Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption
Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operations, and LoopLimit bypass via range enumeration in builtin functions. Attacker...
CVE-2026-74784
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...
CVE-2026-74784
Scriban before 7.2.0 exposes a Denial of Service via array.insert_at. The vulnerability allocates unbounded null entries when given a large index, ignoring LoopLimit and LimitToString constraints, causing OutOfMemoryException and crashing the host process in under a second. Affected component: Sc...
CVE-2026-74784 Scriban before 7.2.0 Denial of Service via array.insert_at
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...
EUVD-2026-59950
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...
CVE-2026-74784 Scriban before 7.2.0 Denial of Service via array.insert_at
Scriban before 7.2.0 contains a denial of service vulnerability in the array.insertat function that allocates unbounded null entries without respecting LoopLimit or LimitToString constraints. Attackers can supply a large index parameter to trigger OutOfMemoryException and crash the host process i...