Security
فارسی
All products

scriban.signed

NuGet · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToStringCVE-2026-74786 · GHSA-M2P3-HWV5-XPQW scriban.signedscriban NuGet Medium Fix reported
Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of ServiceCVE-2026-74788 · GHSA-V66J-X4HW-FV9G scriban.signedscriban NuGet High Fix reported
Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuseCVE-2026-74790 · GHSA-5WR9-M6JW-XX44 scriban.signedscriban NuGet Critical Fix reported
Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset() CVE-2026-74791 · GHSA-X6M9-38VM-2XHF scriban.signedscriban NuGet High Fix reported
Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hxCVE-2026-73062 · GHSA-Q6RR-FM2G-G5X8 scriban.signedscriban NuGet Medium Fix reported
Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToStringCVE-2026-74784 · GHSA-24C8-4792-22HX scriban.signedscriban NuGet High Fix reported
Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6q4-fgr8-vx4p)CVE-2026-74783 · GHSA-6Q7J-XR26-3H2C scriban.signedscriban NuGet Medium Fix reported
Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression EvaluationCVE-2026-74785 · GHSA-XW6W-9JJH-P9CR scriban.signedscriban NuGet Medium Fix reported
Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowExceptionCVE-2026-74787 · GHSA-XCX6-VP38-8HR5 scriban.signedscriban NuGet High Fix reported
Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit FixCVE-2026-74792 · GHSA-P6Q4-FGR8-VX4P scriban.signedscriban NuGet High Fix reported
Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)CVE-2026-74794 · GHSA-GRR9-747V-XVCP scriban.signedscriban NuGet High Fix reported
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)CVE-2026-74795 · GHSA-WGH7-7M3C-FX25 scriban.signedscriban NuGet High Fix reported
Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of ServiceCVE-2026-74789 · GHSA-C875-H985-HVRC scriban.signedscriban NuGet High Fix reported
Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)GHSA-5RPF-X9JG-8J5P scriban.signedscriban NuGet Medium Fix reported