CVE-2026-74790

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by reusing a TemplateContext after tightening its...

PT-2026-73158

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.0.0 Description Scriban caches TypedObjectAccessor based solely on the type, ignoring changes made to the MemberFilter. This behavior allows reused TemplateContext instances to expose members that were intended to b...