Scriban vulnerabilities

Products

• Scriban 15

Newest

• scriban Scriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.Multiply CVE-2026-73060 8.7 HighAugust 16, 2026
• scriban Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor CVE-2026-73061 Fix available 9.3 CriticalJuly 6, 2026
• scriban Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service CVE-2026-74783 Fix available 8.7 HighJune 26, 2026
• scriban Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication CVE-2026-73062 Fix available 8.7 HighJune 26, 2026
• scriban Scriban before 7.2.0 Denial of Service via array.insert_at CVE-2026-74784 Fix available 8.7 HighMay 19, 2026
• scriban Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption CVE-2026-74785 Fix available 7.1 HighMarch 24, 2026
• scriban Scriban before 7.0.0 Denial of Service via Unbounded Template Output CVE-2026-74786 Fix available 7.1 HighMarch 24, 2026
• scriban Scriban before 7.0.0 Uncontrolled Recursion via object.to_json CVE-2026-74787 Fix available 8.7 HighMarch 24, 2026
• scriban Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right CVE-2026-74788 Fix available 8.7 HighMarch 24, 2026
• scriban Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations CVE-2026-74789 Fix available 8.7 HighMarch 24, 2026
• scriban Scriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache CVE-2026-74790 Fix available 9.3 CriticalMarch 24, 2026
• scriban Scriban before 7.0.0 Authorization Bypass via Stale Include Cache CVE-2026-74791 Fix available 9.2 CriticalMarch 24, 2026
• scriban Scriban before 7.0.0 Stack Overflow via nested array initializers CVE-2026-74792 Fix available 8.7 HighMarch 24, 2026
• scriban Scriban before 6.6.0 Denial of Service via Infinite Recursion CVE-2026-74794 Fix available 8.7 HighMarch 19, 2026
• scriban Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion CVE-2026-74795 Fix available 8.7 HighMarch 19, 2026