Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records.

1. 37
   CVE NVD 2h ago

   Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains bypass…

   Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains bypass ExpressionDepthLimit, array comparison lacks depth and cycle checks, and object.eval bypasses…

   CVSS 7.5 CVE-2026-124439 Scriban Email
2. 25
   CVE NVD 2h ago

   Scriban before 7.5.2 contains an information disclosure and object manipulation vulnerability that allows template authors to access .NET internals…

   Scriban before 7.5.2 contains an information disclosure and object manipulation vulnerability that allows template authors to access .NET internals of function values through reflection member accessors. Attackers can use…

   CVSS 7.4 CVE-2026-124438 Scriban
3. 25
   CVE NVD 2h ago

   Scriban before 7.5.3 contains a resource exhaustion vulnerability that allows untrusted template authors to exhaust memory and CPU because builtins…

   Scriban before 7.5.3 contains a resource exhaustion vulnerability that allows untrusted template authors to exhaust memory and CPU because builtins like math.format, regex.replace and string.escape skip the LimitToString…

   CVSS 7.5 CVE-2026-124437 Scriban

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Scriban&limit=100. RSS for this section: feed.xml.