CVE-2026-124439

Versions of Scriban and Scriban.Signed before 7.5.3 are vulnerable to a Denial of Service (DoS) attack due to uncontrolled recursion flaws. The vulnerability occurs because postfix members, indexers, and call chains bypass the ExpressionDepthLimit , while array comparisons lack depth and cycle ch...