{"schema_version":1,"title":"Scriban.Signed (NuGet) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 25 vulnerabilities in Scriban.Signed (NuGet): 0 in the last 7 days and 7 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-74795, was published on 16 August 2026.","url":"https://junglewise.ai/threats/technologies/scriban-signed","json_url":"https://junglewise.ai/threats/technologies/scriban-signed.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/scriban-signed","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":13,"all_time":25,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":7,"last_365_days":25},"latest":[{"cve":"CVE-2026-74795","cvss":7.5,"epss":0.0058,"slug":"cve-2026-74795-scriban-uncontrolled-recursion-stack-overflow-in-parser","title":"Scriban uncontrolled recursion stack overflow in parser","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.59+00:00","url":"https://junglewise.ai/threats/cve-2026-74795-scriban-uncontrolled-recursion-stack-overflow-in-parser"},{"cve":"CVE-2026-74794","cvss":7.5,"epss":0.0049,"slug":"cve-2026-74794-scriban-infinite-recursion-in-object-rendering","title":"Scriban infinite recursion in object rendering","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.45+00:00","url":"https://junglewise.ai/threats/cve-2026-74794-scriban-infinite-recursion-in-object-rendering"},{"cve":"CVE-2026-74792","cvss":7.5,"epss":0.0053,"slug":"cve-2026-74792-scriban-stack-overflow-in-nested-array-initializer-parsing","title":"Scriban stack overflow in nested array initializer parsing","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.317+00:00","url":"https://junglewise.ai/threats/cve-2026-74792-scriban-stack-overflow-in-nested-array-initializer-parsing"},{"cve":"CVE-2026-74791","cvss":8.6,"epss":0.0043,"slug":"cve-2026-74791-scriban-authorization-bypass-via-stale-include-cache","title":"Scriban authorization bypass via stale include cache","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.183+00:00","url":"https://junglewise.ai/threats/cve-2026-74791-scriban-authorization-bypass-via-stale-include-cache"},{"cve":"CVE-2026-74790","cvss":9.1,"epss":0.0047,"slug":"cve-2026-74790-scriban-typedobjectaccessor-cache-memberfilter-bypass","title":"Scriban TypedObjectAccessor cache MemberFilter bypass","severity":"critical","exploited":false,"published_at":"2026-08-16T14:16:57.05+00:00","url":"https://junglewise.ai/threats/cve-2026-74790-scriban-typedobjectaccessor-cache-memberfilter-bypass"},{"cve":"CVE-2026-74789","cvss":7.5,"epss":0.006,"slug":"cve-2026-74789-scriban-looplimit-denial-of-service-bypass-in-built-in-operations","title":"Scriban LoopLimit denial-of-service bypass in built-in operations","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:56.917+00:00","url":"https://junglewise.ai/threats/cve-2026-74789-scriban-looplimit-denial-of-service-bypass-in-built-in-operations"},{"cve":"CVE-2026-74788","cvss":7.5,"epss":0.0049,"slug":"cve-2026-74788-scriban-uncontrolled-memory-allocation-in-string-pad-left-and","title":"Scriban uncontrolled memory allocation in string.pad_left and string.pad_right","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:56.787+00:00","url":"https://junglewise.ai/threats/cve-2026-74788-scriban-uncontrolled-memory-allocation-in-string-pad-left-and"},{"cve":"CVE-2026-74783","cvss":4,"epss":0.0049,"slug":"cve-2026-74783-scriban-expressiondepthlimit-guard-is-non-enforcing-parser","title":"Scriban: ExpressionDepthLimit guard is non-enforcing , parser-recursion DoS in 6.6.0, 7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 / GHSA-p6","severity":"medium","exploited":false,"published_at":"2026-06-26T21:02:14+00:00","url":"https://junglewise.ai/threats/cve-2026-74783-scriban-expressiondepthlimit-guard-is-non-enforcing-parser"},{"cve":"CVE-2026-73062","cvss":4,"epss":0.0049,"slug":"cve-2026-73062-scriban-array-int-scriptarray-t-tryevaluate-bypasses-looplimit","title":"Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit , incomplete fix for GHSA-c875-h985-hvrc, missed sibling of GHSA-24c8-4","severity":"medium","exploited":false,"published_at":"2026-06-26T21:01:57+00:00","url":"https://junglewise.ai/threats/cve-2026-73062-scriban-array-int-scriptarray-t-tryevaluate-bypasses-looplimit"},{"cve":"CVE-2026-74784","cvss":4,"epss":0.0045,"slug":"cve-2026-74784-scriban-array-insert-at-index-parameter-dos-bypasses-looplimit","title":"Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString","severity":"medium","exploited":false,"published_at":"2026-05-19T14:35:25+00:00","url":"https://junglewise.ai/threats/cve-2026-74784-scriban-array-insert-at-index-parameter-dos-bypasses-looplimit"},{"cve":"CVE-2026-74785","cvss":3.1,"epss":0.0048,"slug":"cve-2026-74785-scriban-has-multiple-denial-of-service-vectors-via-unbounded","title":"Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression Evaluation","severity":"low","exploited":false,"published_at":"2026-03-24T22:16:01+00:00","url":"https://junglewise.ai/threats/cve-2026-74785-scriban-has-multiple-denial-of-service-vectors-via-unbounded"},{"cvss":6.5,"slug":"scriban-denial-of-service-via-unbounded-resource-consumption-85fd7c72","title":"Scriban denial of service via unbounded resource consumption","severity":"medium","exploited":false,"published_at":"2026-03-24T22:16:01+00:00","url":"https://junglewise.ai/threats/scriban-denial-of-service-via-unbounded-resource-consumption-85fd7c72"},{"cve":"CVE-2026-74786","cvss":3.1,"epss":0.0048,"slug":"cve-2026-74786-scriban-denial-of-service-via-unbounded-cumulative-template","title":"Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToString","severity":"low","exploited":false,"published_at":"2026-03-24T22:15:43+00:00","url":"https://junglewise.ai/threats/cve-2026-74786-scriban-denial-of-service-via-unbounded-cumulative-template"},{"cvss":6.5,"slug":"scriban-denial-of-service-via-unbounded-cumulative-template-output-fd511cae","title":"Scriban denial of service via unbounded cumulative template output","severity":"medium","exploited":false,"published_at":"2026-03-24T22:15:43+00:00","url":"https://junglewise.ai/threats/scriban-denial-of-service-via-unbounded-cumulative-template-output-fd511cae"},{"cvss":7.5,"slug":"scriban-uncontrolled-recursion-in-object-to-json-7e1ae03a","title":"Scriban uncontrolled recursion in object.to_json","severity":"high","exploited":false,"published_at":"2026-03-24T22:15:13+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-recursion-in-object-to-json-7e1ae03a"},{"cve":"CVE-2026-74787","cvss":3.1,"epss":0.0049,"slug":"cve-2026-74787-scriban-has-uncontrolled-recursion-in-object-to-json-causing","title":"Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowException","severity":"low","exploited":false,"published_at":"2026-03-24T22:15:13+00:00","url":"https://junglewise.ai/threats/cve-2026-74787-scriban-has-uncontrolled-recursion-in-object-to-json-causing"},{"cvss":7.5,"slug":"scriban-uncontrolled-memory-allocation-in-string-padding-functions-782642d8","title":"Scriban uncontrolled memory allocation in string padding functions","severity":"high","exploited":false,"published_at":"2026-03-24T22:13:37+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-memory-allocation-in-string-padding-functions-782642d8"},{"cvss":7.5,"slug":"scriban-uncontrolled-resource-consumption-via-looplimit-bypass-2de84d82","title":"Scriban uncontrolled resource consumption via LoopLimit bypass","severity":"high","exploited":false,"published_at":"2026-03-24T22:13:08+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-resource-consumption-via-looplimit-bypass-2de84d82"},{"cvss":9.1,"slug":"scriban-sandbox-escape-via-stale-memberfilter-cache-in-templatecontext-9eac7f21","title":"Scriban sandbox escape via stale MemberFilter cache in TemplateContext","severity":"critical","exploited":false,"published_at":"2026-03-24T22:11:38+00:00","url":"https://junglewise.ai/threats/scriban-sandbox-escape-via-stale-memberfilter-cache-in-templatecontext-9eac7f21"},{"cvss":8.6,"slug":"scriban-information-disclosure-via-stale-include-cache-in-7f78542b","title":"Scriban information disclosure via stale include cache in TemplateContext","severity":"high","exploited":false,"published_at":"2026-03-24T22:09:49+00:00","url":"https://junglewise.ai/threats/scriban-information-disclosure-via-stale-include-cache-in-7f78542b"},{"cvss":7.5,"slug":"scriban-uncontrolled-recursion-in-nested-array-initializers-f249a416","title":"Scriban uncontrolled recursion in nested array initializers","severity":"high","exploited":false,"published_at":"2026-03-24T22:06:24+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-recursion-in-nested-array-initializers-f249a416"},{"cvss":5.3,"slug":"scriban-unbounded-string-generation-denial-of-service-5b933c02","title":"Scriban unbounded string generation denial of service","severity":"medium","exploited":false,"published_at":"2026-03-19T21:31:10+00:00","url":"https://junglewise.ai/threats/scriban-unbounded-string-generation-denial-of-service-5b933c02"},{"cvss":3.1,"slug":"scriban-affected-by-memory-exhaustion-oom-via-unbounded-string-ff1ea1a5","title":"Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)","severity":"low","exploited":false,"published_at":"2026-03-19T21:31:10+00:00","url":"https://junglewise.ai/threats/scriban-affected-by-memory-exhaustion-oom-via-unbounded-string-ff1ea1a5"},{"cvss":7.5,"slug":"scriban-uncontrolled-recursion-in-object-rendering-leads-to-dos-d9c89d44","title":"Scriban uncontrolled recursion in object rendering leads to DoS","severity":"high","exploited":false,"published_at":"2026-03-19T21:31:01+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-recursion-in-object-rendering-leads-to-dos-d9c89d44"},{"cvss":7.5,"slug":"scriban-uncontrolled-recursion-in-parser-leads-to-denial-of-service-97b6b61c","title":"Scriban uncontrolled recursion in parser leads to Denial of Service","severity":"high","exploited":false,"published_at":"2026-03-19T21:30:54+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-recursion-in-parser-leads-to-denial-of-service-97b6b61c"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":1,"exploited":0,"vulnerabilities":7},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Magick.NET-Q16-AnyCPU (NuGet)","slug":"magick-net-q16-anycpu","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-anycpu"},{"name":"Magick.NET-Q16-HDRI-AnyCPU (NuGet)","slug":"magick-net-q16-hdri-anycpu","vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-anycpu"},{"name":"Magick.NET-Q16-HDRI-x86 (NuGet)","slug":"magick-net-q16-hdri-x86","vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x86"},{"name":"Magick.NET-Q16-x86 (NuGet)","slug":"magick-net-q16-x86","vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-x86"},{"name":"Magick.NET-Q8-AnyCPU (NuGet)","slug":"magick-net-q8-anycpu","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-anycpu"},{"name":"Magick.NET-Q8-OpenMP-x64 (NuGet)","slug":"magick-net-q8-openmp-x64","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-openmp-x64"},{"name":"Magick.NET-Q8-x86 (NuGet)","slug":"magick-net-q8-x86","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/magick-net-q8-x86"},{"name":"Magick.NET-Q16-OpenMP-x64 (NuGet)","slug":"magick-net-q16-openmp-x64","vulnerabilities":50,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-x64"},{"name":"Magick.NET-Q16-arm64 (NuGet)","slug":"magick-net-q16-arm64","vulnerabilities":49,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-arm64"},{"name":"Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-hdri-openmp-arm64","vulnerabilities":49,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-openmp-arm64"},{"name":"Magick.NET-Q16-HDRI-x64 (NuGet)","slug":"magick-net-q16-hdri-x64","vulnerabilities":49,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-hdri-x64"},{"name":"Magick.NET-Q16-OpenMP-arm64 (NuGet)","slug":"magick-net-q16-openmp-arm64","vulnerabilities":49,"url":"https://junglewise.ai/threats/technologies/magick-net-q16-openmp-arm64"}],"technology":{"hub":true,"name":"Scriban.Signed (NuGet)","slug":"scriban-signed","vendor":{"name":"NuGet","slug":"nuget","url":"https://junglewise.ai/threats/vendors/nuget"},"aliases":[],"homepage":"https://www.nuget.org/packages/Scriban.Signed/","repo_url":"https://github.com/scriban/scriban","description":"Scriban.Signed is a signed version of the Scriban text templating engine for .NET.","url":"https://junglewise.ai/threats/technologies/scriban-signed"},"most_severe":[{"cve":"CVE-2026-74790","cvss":9.1,"epss":0.0047,"slug":"cve-2026-74790-scriban-typedobjectaccessor-cache-memberfilter-bypass","title":"Scriban TypedObjectAccessor cache MemberFilter bypass","severity":"critical","exploited":false,"published_at":"2026-08-16T14:16:57.05+00:00","url":"https://junglewise.ai/threats/cve-2026-74790-scriban-typedobjectaccessor-cache-memberfilter-bypass"},{"cvss":9.1,"slug":"scriban-sandbox-escape-via-stale-memberfilter-cache-in-templatecontext-9eac7f21","title":"Scriban sandbox escape via stale MemberFilter cache in TemplateContext","severity":"critical","exploited":false,"published_at":"2026-03-24T22:11:38+00:00","url":"https://junglewise.ai/threats/scriban-sandbox-escape-via-stale-memberfilter-cache-in-templatecontext-9eac7f21"},{"cve":"CVE-2026-74791","cvss":8.6,"epss":0.0043,"slug":"cve-2026-74791-scriban-authorization-bypass-via-stale-include-cache","title":"Scriban authorization bypass via stale include cache","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.183+00:00","url":"https://junglewise.ai/threats/cve-2026-74791-scriban-authorization-bypass-via-stale-include-cache"},{"cvss":8.6,"slug":"scriban-information-disclosure-via-stale-include-cache-in-7f78542b","title":"Scriban information disclosure via stale include cache in TemplateContext","severity":"high","exploited":false,"published_at":"2026-03-24T22:09:49+00:00","url":"https://junglewise.ai/threats/scriban-information-disclosure-via-stale-include-cache-in-7f78542b"},{"cve":"CVE-2026-74789","cvss":7.5,"epss":0.006,"slug":"cve-2026-74789-scriban-looplimit-denial-of-service-bypass-in-built-in-operations","title":"Scriban LoopLimit denial-of-service bypass in built-in operations","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:56.917+00:00","url":"https://junglewise.ai/threats/cve-2026-74789-scriban-looplimit-denial-of-service-bypass-in-built-in-operations"},{"cve":"CVE-2026-74795","cvss":7.5,"epss":0.0058,"slug":"cve-2026-74795-scriban-uncontrolled-recursion-stack-overflow-in-parser","title":"Scriban uncontrolled recursion stack overflow in parser","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.59+00:00","url":"https://junglewise.ai/threats/cve-2026-74795-scriban-uncontrolled-recursion-stack-overflow-in-parser"},{"cve":"CVE-2026-74792","cvss":7.5,"epss":0.0053,"slug":"cve-2026-74792-scriban-stack-overflow-in-nested-array-initializer-parsing","title":"Scriban stack overflow in nested array initializer parsing","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.317+00:00","url":"https://junglewise.ai/threats/cve-2026-74792-scriban-stack-overflow-in-nested-array-initializer-parsing"},{"cve":"CVE-2026-74794","cvss":7.5,"epss":0.0049,"slug":"cve-2026-74794-scriban-infinite-recursion-in-object-rendering","title":"Scriban infinite recursion in object rendering","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:57.45+00:00","url":"https://junglewise.ai/threats/cve-2026-74794-scriban-infinite-recursion-in-object-rendering"},{"cve":"CVE-2026-74788","cvss":7.5,"epss":0.0049,"slug":"cve-2026-74788-scriban-uncontrolled-memory-allocation-in-string-pad-left-and","title":"Scriban uncontrolled memory allocation in string.pad_left and string.pad_right","severity":"high","exploited":false,"published_at":"2026-08-16T14:16:56.787+00:00","url":"https://junglewise.ai/threats/cve-2026-74788-scriban-uncontrolled-memory-allocation-in-string-pad-left-and"},{"cvss":7.5,"slug":"scriban-uncontrolled-recursion-in-object-to-json-7e1ae03a","title":"Scriban uncontrolled recursion in object.to_json","severity":"high","exploited":false,"published_at":"2026-03-24T22:15:13+00:00","url":"https://junglewise.ai/threats/scriban-uncontrolled-recursion-in-object-to-json-7e1ae03a"}],"generated_at":"2026-09-26T18:07:00.158435+00:00"}