Vulnerabilities in scriban
15 resultsVexday analysis
Scriban apresenta 15 vulnerabilidades no catálogo, todas publicadas nos últimos 90 dias, sinalizando descobertas recentes em componente ativo. Três são classificadas como críticas, mas nenhuma está sob exploração confirmada (KEV). A fraqueza dominante é recursão descontrolada (CWE-674), típica de processadores de templates, representando risco moderado se a entrada não for validada adequadamente.
CVE-2026-73060HIGHScriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.MultiplyEPSS 0.4%CVE-2026-74789HIGHScriban before 7.0.0 LoopLimit Bypass via Built-in OperationsEPSS 0.3%CVE-2026-74787HIGHScriban before 7.0.0 Uncontrolled Recursion via object.to_jsonEPSS 0.3%CVE-2026-74795HIGHScriban before 6.6.0 Denial of Service via Uncontrolled RecursionEPSS 0.3%CVE-2026-74792HIGHScriban before 7.0.0 Stack Overflow via nested array initializersEPSS 0.3%CVE-2026-73061CRITICALScriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessorEPSS 0.3%CVE-2026-74790CRITICALScriban before 7.0.0 MemberFilter Bypass via TemplateContext CacheEPSS 0.3%CVE-2026-74788HIGHScriban before 7.0.0 Denial of Service via string.pad_left/pad_rightEPSS 0.3%CVE-2026-73062HIGHScriban 3.0.0 through 7.2.0 Denial of Service via Array MultiplicationEPSS 0.3%CVE-2026-74794HIGHScriban before 6.6.0 Denial of Service via Infinite RecursionEPSS 0.3%CVE-2026-74783HIGHScriban 6.6.0 through 7.2.0 Parser Recursion Denial of ServiceEPSS 0.3%CVE-2026-74786HIGHScriban before 7.0.0 Denial of Service via Unbounded Template OutputEPSS 0.3%CVE-2026-74785HIGHScriban before 7.0.0 Denial of Service via Unbounded Resource ConsumptionEPSS 0.3%CVE-2026-74791CRITICALScriban before 7.0.0 Authorization Bypass via Stale Include CacheEPSS 0.3%CVE-2026-74784HIGHScriban before 7.2.0 Denial of Service via array.insert_atEPSS 0.3%