35566 matches found
MINI-RFV3-CXR5-6G82
Bulletin has no description...
CVE-2026-74792
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74794
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...
MINI-H7CW-XG89-HVJ7
Bulletin has no description...
MINI-VVP6-8X35-29H6
Bulletin has no description...
CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...
CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...
CVE-2026-74795
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The ExpressionDepthLimit defaults to null/disabled, allowing attackers to supply deeply nested templates (thousands of nested blocks) that exhaust thread stack space and trigger a StackOverflowE...
CVE-2026-74794
Scriban before version 6.6.0 contains an infinite recursion vulnerability in object rendering when ObjectRecursionLimit is unlimited. Attacker-supplied circular references in the template context can exhaust stack space, causing an uncatchable StackOverflowException that terminates the hosting pr...
CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...
EUVD-2026-59960
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...
CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion
Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit the ExpressionDepthLimit property in ParserOptions defaults to null/disabled, so an attacker who controls template input can supply a...
EUVD-2026-59958
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74792
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74792
CVE-2026-74792 affects Scriban before 7.0.0 (versions
CVE-2026-74792 Scriban before 7.0.0 Stack Overflow via nested array initializers
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74783
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parentheses, array initializers, object initializers, or unary operators to trigger ...
CVE-2026-74783 Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parentheses, array initializers, object initializers, or unary operators to trigger ...
CVE-2026-74783
CVE-2026-74783 affects Scriban versions 6.6.0 through 7.2.0. The issue is a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parentheses, array initializers, object initializers, o...