High
CVE-2026-73061
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2026-74783
Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)
Medium
CVE-2026-73062
Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx
High
CVE-2026-74784
Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString
Medium
CVE-2026-74785
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation
Medium
CVE-2026-74786
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString
High
CVE-2026-74787
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException
High
CVE-2026-74788
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of Service
High
CVE-2026-74789
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of Service
Critical
CVE-2026-74790
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuse
High
CVE-2026-74791
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset()
High
CVE-2026-74792
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit Fix
Medium
ghsa-5rpf-x9jg-8j5p
Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)
High
CVE-2026-74794
Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)
High
CVE-2026-74795
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.