38298 matches found
CVE-2026-74783 Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service
Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parentheses, array initializers, object initializers, or unary operators to trigger ...
CVE-2026-74783
CVE-2026-74783 affects Scriban versions 6.6.0 through 7.2.0. The issue is a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parentheses, array initializers, object initializers, o...
MINI-64R3-5QCG-FF4Q
Bulletin has no description...
MINI-4RRR-R49X-PM8H
Bulletin has no description...
MINI-H2XP-X26H-WR92
Bulletin has no description...
MINI-PJ4P-GCVV-HC85
Bulletin has no description...
MINI-FP4W-G8VM-GP88
Bulletin has no description...
MINI-8M84-G46P-MMXQ
Bulletin has no description...
MINI-48P3-R38V-8MGM
Bulletin has no description...
MINI-5CCC-24WM-3HGP
Bulletin has no description...
PT-2026-73160
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
CVE-2026-74792: Uncontrolled Recursion
Scriban before 7.0.0 affected versions = 6.6.0 contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path ParseArrayInitializer → ParseExpression → ParseArrayInitializer that is not covered by the ExpressionDepthLimit count...
PT-2026-73161
Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...
SUSE CVE-2026-74576
In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b "mm/slab: avoid allocating slabobjext array from its own slab" avoided recursive allocation of objexts from kmalloc caches of the same...
MINI-PPQR-Q89F-PR76
Bulletin has no description...
MINI-C6VV-GH7P-MVC4
Bulletin has no description...
MINI-PCPJ-GJ8Q-6XHX
Bulletin has no description...
MINI-VX4R-C439-WCRM
Bulletin has no description...