Skip to content

CVE record · 1 source

CVE-2026-124439

CVSS 7.5

Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains bypass…

Vendor: Scriban
Product: scriban
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-674
Exposure class: Email

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

37

CVE NVD 2h ago

Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains bypass…

Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains bypass ExpressionDepthLimit, array comparison lacks depth and cycle checks, and object.eval bypasses…

CVSS 7.5 CVE-2026-124439 Scriban