Junglewise Threat Intelligence

CVE-2026-73062: Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit , incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4

CVE-2026-73062 · Severity: medium · CVSS 4 · Published 2026-06-26

Technologies: Scriban.Signed (NuGet), scriban (NuGet). Vendors: NuGet.

Executive brief

Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4792-22hx

Affected products

  • NuGet Scriban.Signed
  • NuGet scriban

Related threats