Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/24 10:11 p.m.9 views

Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse

Summary TemplateContext caches type accessors by Type only, but those accessors are built using the current MemberFilter and MemberRenamer. When a TemplateContext is reused and the filter is tightened for a later render, Scriban still reuses the old accessor and continues exposing members that...

5.8AI score
SaveExploits0References2Affected Software2
Rows per page
Query Builder