Scriban vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
GHSA-7JVP-HJ45-2F2MHighScriban: Scriban: Template Writes to Arbitrary CLR Properties via `TypedObjectAccessor` (Mass Assignment + `private` / `init` / `internal` Setter…GHSA-6Q7J-XR26-3H2CMediumScriban: Scriban: ExpressionDepthLimit guard is non-enforcing — parser-recursion DoS in 6.6.0–7.2.0 (incomplete fix for GHSA-wgh7-7m3c-fx25 /…GHSA-Q6RR-FM2G-G5X8MediumScriban: Scriban: array * int (ScriptArray<T>.TryEvaluate) bypasses LoopLimit — incomplete fix for GHSA-c875-h985-hvrc, missed sibling of…GHSA-24C8-4792-22HXHighscriban: Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToStringGHSA-XW6W-9JJH-P9CRMediumScriban: Scriban has Multiple Denial-of-Service Vectors via Unbounded Resource Consumption During Expression EvaluationGHSA-M2P3-HWV5-XPQWMediumScriban: Scriban: Denial of Service via Unbounded Cumulative Template Output Bypassing LimitToStringGHSA-XCX6-VP38-8HR5HighScriban: Scriban has Uncontrolled Recursion in `object.to_json` Causing Unrecoverable Process Crash via StackOverflowExceptionGHSA-V66J-X4HW-FV9GHighScriban: Scriban: Uncontrolled Memory Allocation via string.pad_left/pad_right Allows Remote Denial of ServiceGHSA-C875-H985-HVRCHighscriban: Scriban: Built-in operations bypass LoopLimit and delay cancellation, enabling Denial of ServiceGHSA-5WR9-M6JW-XX44Criticalscriban: Scriban: Sandbox escape due to TypedObjectAccessorcache bypassing MemberFilter after TemplateContext reuseGHSA-X6M9-38VM-2XHFHighscriban: Scriban has an authorization bypass due to stale include cache surviving TemplateContext.Reset() GHSA-P6Q4-FGR8-VX4PHighScriban: Scriban has a Stack Overflow via Nested Array Initializers That Bypass the ExpressionDepthLimit FixGHSA-5RPF-X9JG-8J5PMediumscriban: Scriban Affected by Memory Exhaustion (OOM) via Unbounded String Generation (Denial of Service)GHSA-GRR9-747V-XVCPHighscriban: Scriban has an Infinite Recursion during Object Rendering Leads to Stack Overflow and Process Crash (Denial of Service)GHSA-WGH7-7M3C-FX25Highscriban: Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo